For the third year in a row Hdiv participated in the RSA Conference which took place at the Moscone Center in San Francisco. As one of the leading conferences in the cybersecurity space, the event congregated around 40,000 security professionals, and around 600 companies exhibited. 1. The WAF Replacement The main message that Hdiv brought […]
AST tools are one of the pillars of any Application Security practice. We believe that applications should be built secure from the very beginning, so we advocate for developers to take an active role in AppSec. As a result, we believe that all developers should have a basic knowledge of Application Security Testing (AST) tools […]
As teams release code to production faster than ever before, mainstream AST tools are struggling to adapt to these changing conditions. Static ASTs help mostly during development stages, and are not well adapted to production environments. Dynamic ASTs are frequently used in production environments, but lack the agility to support continuous deployment practices. The reason […]
Last week we joined the fabulous OWASP AppSec California 2019 conference in Santa Monica, one of the most prominent Application Security events not only in California, but even at national level. Compared to the RSA conference, which is more vendor-driven, AppSec California is speaker-driven. There is still a well-attended representation of AppSec vendors, but the […]
As part of our “DevSecOps Best Practices” post series, we are expanding each of the seven recommendations we provided to teams wanting to adopt DevSecOps methodologies. In this particular article, we want to bring attention to the lack of coordination we often see between developers and security analysts. While we always advocate that developers should […]
A common misconception that we often hear when talking to our clients about IAST tools is that they are only helpful during the development phase. This idea is probably rooted in the role that legacy AST tools such as SASTs have traditionally played in the overall application security workflow. We briefly touched on this subject […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
