Web Application Security Automation

Why is web application security automation testing valuable? Automation can improve the speed of execution and remediation, reduce human errors, and reduce costs. In this demo, we'll show you how easy it can be!


We'll go through the process of planning, creating, testing, and automating an attack for remediation, focusing on three web attacks from the OWASP Top 10 Web Application Security Risks: SQL injection, sensitive data exposure, and cross-site scripting XSS. Our environment uses two vulnerable web applications—Juice Shop and RailsGoat—and runs the attack jobs through industry-leading tools such as Jenkins, Splunk, and Jira to demonstrate the importance of DevSecOps orchestration.



Watch the full webinar recording on The Power of DevSecOps Automation with 2 additional demos from our team: https://www.youtube.com/watch?v=Xn04ServJKA&t=1737s

For more information about how Critical Design Associates can help you, visit our website: https://criticaldesign.net/contact.html
To read our blog article on these topics, visit: https://criticaldesign.net/news/the-power-of-devsecops-automation.html


We'd also like to give special thanks to the creators of the web applications used in this demo: Björn Kimminich, the OWASP Foundation, and many RailsGoat contributors: https://github.com/OWASP/railsgoat/graphs/contributors


Check out more from the creators:

https://github.com/bkimminich/juice-shop
https://github.com/OWASP/railsgoat