~/talks

Scott Gerlach

what they talk about

all 6 in the filters

where they keep going back

all 9 in the filters

on a stage with

who talks about the same things

titleconferencedate
Modern GraphQL API Security TestingGraphQL Galaxy 20222022-12-09
Claim: StackHawk DAST drives GraphQL APIs directly using GraphQL introspection, runs locally or in CI via Docker/Java, and uses real or Faker data to exercise…
Talk on
Automated Security Testing for JS AppsTestJS Summit 20222022-11-04
Claims that API-focused DAST finds the actually exploitable bugs in JS apps, not just front-end fluff, and demonstrates a toolchain that proves it: driving…
Talk on
Automated Application Security TestingReact Summit 20222022-06-17
A demo of StackHawk shows an automated DAST scanner that attacks running HTTP and REST/GraphQL endpoints, reports concrete findings like SQL injection and XSS…
Talk on
Automated Application Security TestingJSNation Conference 20222022-06-16
Claims an automated dynamic application scanner that runs against live HTTP apps and APIs and reliably finds real bugs — demo surfaces SQL injection and…
Talk on
Automated Application Security TestingDevOps.js Conf 20222022-03-24
Claims a dynamic scanner that tests running HTTP apps and REST/GraphQL/SOAP APIs, integrates in CI/CD and runs via docker run stackhawk against local or…
Talk on
Automated Application Security Testing with StackHawkNode Congress 20222022-02-17
StackHawk claims fast, automated dynamic testing of running HTTP APIs (REST, GraphQL, SOAP) by running a Docker scanner close to the app and using…
Talk on
How to Make GraphQL Security Easier with StackHawkGraphQL Galaxy 20212021-12-09
StackHawk runs an active DAST scanner against a running GraphQL endpoint via a simple docker command and config YML, uses GraphQL introspection to enumerate 11…
Talk on
Automated Application Security TestingTestJS Summit 20212021-11-18
StackHawk runs an active dynamic scanner against running HTTP apps and APIs, claims to find OWASP Top 10 bugs and finish most scans under 10 minutes, and…
Talk on
Automated Application Security Testing with StackHawkReact Advanced 20212021-10-22
StackHawk runs active dynamic scans against running JS apps and APIs and claims most customer scans run average around or under 10 minutes. Scanner runs as a…
Talk on
Automated Security Testing for JS Apps & Underlying APIsJSNation Live 20212021-06-09
StackHawk is a docker-based scanner that runs against a live host (localhost or CI) and claims to find real issues like cross-site scripting and SQL injection…
Talk on
Securing Node Applications with Automated Security Testing in CI/CDNode Congress 20212021-02-18
This workshop on automated application security testing for Express apps covers the importance of early bug detection, the challenges of testing in production…
Talk on
Why Developers Struggle with API SecurityPostman Galaxy 20212021-02-02
Claims that organizations need one appsec per five devs, that testing suffers from a production bias, and that security must move left drive the talk. Concrete…
Talk on
Why Developers Struggle with AppSecOWASP Global AppSec Virtual 20202020-10-22
The talk claims developers struggle because security decisions happen without context, appsec tools are built for security teams not engineers, and scans are…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.