Integrating API Security Testing Into the Postman Lifecycle
summary
A Postman and WhiteHat integration called Postman + WhiteHat IDD performs fully local, automated API security scans in minutes, embeds results into the Postman workspace, and produces evidence screenshots plus two‑ to three‑minute micro lessons for fixes. Demo uses exported Postman collections, the collection runner and Newman CI integration to run scans in pipelines (Jenkins shown). A sample run reports seven vulnerabilities including a critical SQL injection found against /rest/products/search; the pipeline can fail builds on such findings. Limited beta available.
AI-written summary · about
chapters (10)
- 0:00Introduction and hackathon win
- 1:25Security testing challenges today
- 3:33Must-haves for modern API security
- 4:35Introducing Intelligence Directed DAST
- 5:37Local security testing demo
- 7:24Viewing scan results
- 9:10Just-in-time security lessons
- 10:14CI/CD pipeline integration
- 11:59Key benefits of IDD
- 13:01Call to action and Q&A
related talks
01h 01mApisecure, 14 & 15 March 2023 - Rahul Dhawan, Senior Security Engineer at Postman.
25mHack-Proof Your API: Exclusive Attack Simulator Deep Dive 🛡️
40mApisecure, 14 & 15 March 2023 - Ian Douglas, Senior Developer Advocate at Postman.
15mJumpstart Security & Penetration Testing APIs
15mDev-first API and application security testing
34mPostman & Newman for your CICD
17mAn API Security Testing Blueprint: Because Unit Tests Just Aren't Enough.
08mAutomated Security Testing for JS Apps