Cyber Risks · PortSwigger Research

CI-driven DAST scanning without limits - with Burp Suite - Port Swigger

Summary: PortSwigger is marketing Burp Suite DAST as a scanner that integrates directly into CI pipelines, automating security scans with each build and providing real-time feedback on security issues. The company cites a TechValidate survey of its customers saying the out-of-the-box CI platform plugins allowed for streamlined communication between development, production, and shipping environments.

Bottom line: The pitch rests on scanning that continues regardless of how many new applications are produced, which puts the burden on AppSec teams to keep pace with an ever-growing application portfolio rather than on any fixed scan capacity.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related