secure.AllTheThings() - Make Security Accessible to Everyone!
summary
Platform integrates OWASP ZAP with existing functional tests via WebDriver/Cypress to run security scans in parallel across CI, leveraging Sauce Labs’ signal of ~3 million tests per day. Tests proxy browser traffic to capture ZAP sessions, store them in cloud buckets, and trigger automated or manual scans; a recent run surfaces 10 vulnerabilities (missing headers, exposed secrets) and one novel critical bug that requires manual triage. This setup runs locally or in the cloud.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:56Increase Automation
- 5:59Why secureAllTheThings
- 7:52Overslab
- 15:14Security Scanning
- 16:49Security Vulnerabilities
- 19:32Conclusion
related talks
35mAutomated Security Testing
45mSecurity Testing with OWASP ZAP in CI/CD
36mLet's take baby steps to security testing
41mHow Scripting In ZAP Can Bridge The Gap Between Dev Teams And Security
46mSecurity DevOps - Staying Secure In Agile Projects
52mApplication Security at DevOps Speed and portfolio scale
01h 01mOpen Source Pentesting and Security Analysis Tools: the DevOps way… #slideless
55mPlants vs thieves: Automated Tests in the World of Web Security