Cyber Risks · PortSwigger Research

Cybersecurity Automation Solutions - Port Swigger

Summary: PortSwigger's page describes web security automation as a way to scan web applications for vulnerabilities quickly and automatically, arguing that a worldwide shortage of security talent makes services like penetration testing expensive and hard to scale while large enterprises must protect tens of thousands of web applications. It positions Burp Suite DAST, which integrates with any CI/CD system through a REST API and with Jira, as reducing the burden on manual testers by catching critical vulnerabilities such as SQL injection and cross-site scripting.

What you should know: The page's own framing is that enterprises may run tens of thousands of web applications against a scarce pool of testers, so the gap between what manual pentesting can cover and what is actually exposed is the number to sit with.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related