Cyber Risks · PortSwigger Research

Introducing Burp Suite DAST to your organization - Port Swigger

Summary: PortSwigger published a template letter for security staff to send their CISO, CTO, director, or procurement team recommending purchase of a Burp Suite DAST license, describing it as an automated web vulnerability scanner that enhances current web security capability. The letter cites PortSwigger's 50,000+ paying users across 13,000+ organizations, notes the DAST product launched in 2018, and names Cisco, Wells Fargo, Fidelity, PayPal, and NASA as customers.

Key Takeaway: The pitch rests on trust in the Burp Suite scanning engine already used by the recipient's own AppSec team and penetration testing providers, so the decision a security leader faces is whether to extend that existing reliance to automated scanning across the organization's web estate.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related