Purple Teaming with OWASP PurpleTeam
summary
OWASP PurpleTeam is a developer‑first security regression tester: a CLI that runs in build pipelines and a SaaS/back end of NodeJS microservices, Lambdas/ECS, Redis and an orchestrator that spins up stage‑two containers running ZAP and Selenium (Nikto planned) and a TLS scanner. Jobs are driven by a job file alert thresholds model; test runs spin up emissaries, produce HTML/JSON/CSV reports, and currently show failing sessions when defects exceed thresholds — demoed runs actually bring containers up and down and return reproducible findings.
AI-written summary · about
chapters (14)
- 0:00Purple Teaming intro
- 1:05OWASP PurpleTeam overview
- 2:34Proof of concept to donation
- 3:57PurpleTeam architecture
- 6:52Cost of late bug fixes
- 9:17Early defect detection
- 9:59Setting up PurpleTeam locally
- 11:46Setting up PurpleTeam in the cloud
- 13:13CLI install and run
- 15:48Live demo test
- 17:58Job files and sessions
- 21:29Test results and reports
- 26:53Session outcomes review
- 28:08Call for contributors
related talks
30mPurple Teaming with OWASP PurpleTeam
25mStandard Classification: Purple Teaming with PurpleTeam
45mThis is application purple teaming
52mBuilding the Always-On Purple Team
43mShades of Purple: Getting Started and Making Purple Teaming Possible
34mPurple Team Strategies for Application Security
41mPurple Is the New Red - Providing the Most Value from Offensive Security
39mColorful AppSec - Red, Blue, or Purple?