Integrating Web Vulnerability Scanners in Continuous Integration: DAST for CI/CD

In this day and age having a functioning and secure Software Development Life Cycle (SDLC) process in place is becoming a key component of a successful organization. And one methodology that is becoming increasingly popular is DevOps. Mainly, because the methodology itself is designed to produce fast and robust software development. In this article, we will focus on how we can incorporate security into CI/CD and turning DevOps into DevSecOps easily and with automation in mind.

It’s quite a long article, so in case you are already familiar with some of the terms, feel free to skip to whatever part pleases your curiosity :)

Door |2024-09-30T09:39:14+00:00september 5, 2019|Article, Artikel, Engels, Nederlands, Technology|Reacties uitgeschakeld voor Integrating Web Vulnerability Scanners in Continuous Integration: DAST for CI/CD

Scaling Application Security: The issues that Appsec teams face

This post concerns application security teams, so it’s written assuming you are part of one. However, I believe it could help you understand application security a bit more even if you are not.

If you are part of an application security team, you probably struggle with the amount of work on your shoulders every day. Let’s say you have a small team of 5 people to test all web applications produced by a group of 200 developers, and you still need to provide guidance on how to fix some vulnerabilities. You try to offload some work by handing developers with security testing tools, but the learning curve is long - causing frustration. Basically, you have a scaling issue!

Door |2024-02-17T11:12:31+00:00augustus 22, 2019|Article, Artikel, Engels, Nederlands|Reacties uitgeschakeld voor Scaling Application Security: The issues that Appsec teams face
Ga naar de bovenkant