Standard Classification: Purple Teaming with PurpleTeam
summary
PurpleTeam is a security regression testing CLI and SaaS for web apps and APIs that runs headless in build pipelines or with a UI, built as NodeJS microservices with an orchestrator, Redis comms, SAM CLI lambdas and stage‑2 Docker containers. It embeds tools like ZAP and Selenium plus testssl.sh and plans for Nikto, and after a 3.8 year PoC journey it produces HTML/JSON/CSV/markdown reports in near real time. Demo runs show failing sessions, packed outcome archives, and actionable defect counts instead of expensive late red teams.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 0:34The Journey
- 3:15How does PurpleTeam help
- 5:35Setting up PurpleTeam
- 11:55PurpleTeam CLI
- 12:07Test Run
- 13:18Thresholds
- 14:12Job Files
- 15:29Logs
- 16:46CLI Logs
- 17:49Outcomes Archive
- 21:35CSV Report
- 21:56Job File
- 22:17JSON Result Files
related talks
30mPurple Teaming with OWASP PurpleTeam
29mPurple Teaming with OWASP PurpleTeam
45mThis is application purple teaming
52mBuilding the Always-On Purple Team
41mPurple Is the New Red - Providing the Most Value from Offensive Security
43mShades of Purple: Getting Started and Making Purple Teaming Possible
34mPurple Team Strategies for Application Security
39mColorful AppSec - Red, Blue, or Purple?