Tag

OWASP

12 articles

Latest in OWASP

Blogs

OWASP Adopts CVE Lite CLI to Boost Dependency Scanning

Checking for dependency vulnerabilities in freshly developed software is usually done near the end of the build process. Remediation at that point can be tricky. Now, JavaScript and TypeScript developers can check for vulnerabilit…

May 26, 20263 min

All OWASP Articles

Showing 1–12 of 12

Nov01

Blogs

Update to Open Source ZAP Tool Improves DAST Performance

An update to the OWASP Zed Attack Proxy (ZAP) open source dynamic application security testing (DAST) tool made available today improves performance by employing a multi-threaded p…

3 min

Aug09

Blogs

CREST Defines Quality Verification Standard for AppSec Testing

At the Black Hat USA 2022 conference, CREST today shared a quality assurance verification standard to improve application security testing. The standard is based on the open source…

3 min

Aug04

Blogs

The Everything-As-Code Revolution and the OWASP Top 10

After years of stagnation, the Open Web Application Security Project (OWASP) Top 10 list finally saw some shakeup. Most notably, insecure design debuted on the list as the number f…

3 min

Jun23

Business of DevOps

What the New OWASP Top 10 Changes Mean to Devs

The open web application security project (OWASP) recently updated its top 10 list of the most critical security risks to web applications after four years. It represents the most…

3 min

Jan11

Compliance

What Is OWASP?

With cybersecurity attacks rising, it is important for you to enforce secure software best practices, like OWASP and the OWASP Top 10. OWASP helps you to safeguard your code agains…

3 min

Nov30

Blogs

DevSecOps Implementation: Dynamic Scans

This is the third installment in this series on DevSecOps. Read the first installment, on static analysis, here and the second installment, on source composition analysis, here. On…

3 min

Nov16

Blogs

DevSecOps Implementation: Source Composition Analysis

This is the second installment in this series on DevSecOps. Read the first installment, on Static Analysis, here. One of the better additions to security in recent years is source…

3 min

Jan03

Blogs

Breaking Down the OWASP API Security Top 10, Part 2

Due to the widespread usage of APIs, and the fact that attackers realize APIs are a new attack frontier, the OWASP API Security Top 10 Project was launched. From the beginning, the…

3 min

Jan01

Blogs

Best of 2019: Breaking Down the OWASP API Security Top 10, Part 1

As we close out 2019, we at devopsy.kinsta.cloud wanted to highlight the five most popular articles of the year. Following is the fifth in our weeklong series of the Best of 2019.…

3 min

Apr16

Blogs

DevOps and Security: Be Ready to Shield Your Application

All of us have heard of continuous improvement/continuous delivery (CI/CD). There are many benefits to implementing CI/CD, as it helps seamless integration from end to end for deve…

3 min

Nov19

Protego Spearheads Launch of the OWASP Official Serverless Top 10 Project

Report to Educate Application Security Practitioners on Serverless Application Risks and Mitigation Techniques Baltimore, Maryland – The Open Web Application Security Project (OWAS…

3 min