Global Financial Service Case Study | Port Swigger
Summary: A global payments company with roughly 20,000 employees and operations in over 200 countries adopted Burp Suite DAST to move medium- and low-risk application testing from manual penetration tests to automation, after its pentesters were managing more than 1,000 manual tests a year. The team deployed the scanner on Kubernetes, built an internal wrapper letting application owners upload Postman collections and trigger their own scans, and ramped concurrent scans from about 100 to over 1,000 after onboarding.
Key Takeaway: The organization's stated goal is to scale DAST across more than 900 applications and thousands of concurrent scans by FY26, which puts the burden of catching routine runtime flaws on automation while pentesters concentrate on high-risk systems.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026