Automated Application Security Testing with StackHawk
summary
StackHawk runs active dynamic scans against running JS apps and APIs and claims most customer scans run average around or under 10 minutes. Scanner runs as a Docker container (example: docker run stackhawk), is configured via YAML that lives with the code, and uses OpenAPI/GraphQL introspection to tune attacks. Results include replayable request/response pairs, a validate button gives you a curl command to reproduce, CI/CD break-on-fail and Jira export; free for a single app.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:33About StackHawk
- 1:08How does StackHawk work
- 3:40Demo
- 4:02Summary
- 4:53Overview
- 5:21Issue
- 5:42Request Response
- 6:10StackHawk Configuration
- 8:01Outro
related talks
09mAutomated Application Security Testing with StackHawk
09mAutomated Application Security Testing
09mAutomated Application Security Testing
08mAutomated Security Testing for JS Apps & Underlying APIs
09mAutomated Application Security Testing
15mDev-first API and application security testing
07mSecurity Testing for GraphQL Backed Applications
09mHow to Make GraphQL Security Easier with StackHawk