Tag Archives: Security Testing

AST Tool Evaluation – Key Findings and Limitations of OWASP Benchmark Project

Tools that test code for common vulnerabilities such as OWASP Top Ten fall today in three categories of AST (Application Security Testing) tools: SAST (static code scanning), DAST (dynamic app scan) and IAST (dynamic code scanning). Consequently, there are not … Continue reading

Posted in DAST, IAST, SAST | Tagged , , , | Leave a comment

Automating DAST Scans with Jenkins, Arachni & ThreadFix

I’m often asked how security tests can be automated with non-commercial tools, e.g. triggered by a Jenkins build. Therefore I decided to write this post, to give you a bit of understanding which tools you can use and what you … Continue reading

Posted in DAST, Java, Security Test Automation, Uncategorized | Tagged , | 4 Comments