Purple Teaming with OWASP PurpleTeam
summary
Claim: purpleteam CLI and SaaS embeds security regression tests into build pipelines and as a standalone UI, implemented as NodeJS microservices with a pluggable tester architecture. Tools actually used: zap + selenium emissaries for app scans and testssl.sh for TLS; the server scanner is still a stub. It spins stage‑2 containers on demand (a soft limit of 12 concurrent test sessions), produces HTML/JSON/CSV reports, and the demo run shows failures when defect counts exceed configured alert thresholds versus expensive late red‑team costs.
AI-written summary · about
chapters (4)
related talks
29mPurple Teaming with OWASP PurpleTeam
25mStandard Classification: Purple Teaming with PurpleTeam
45mThis is application purple teaming
34mPurple Team Strategies for Application Security
52mBuilding the Always-On Purple Team
41mPurple Is the New Red - Providing the Most Value from Offensive Security
43mShades of Purple: Getting Started and Making Purple Teaming Possible
39mColorful AppSec - Red, Blue, or Purple?