AST tools are one of the pillars of any Application Security practice. We believe that applications should be built secure from the very beginning, so we advocate for developers to take an active role in AppSec. As a result, we believe that all developers should have a basic knowledge of Application Security Testing (AST) tools […]
DAST, Dynamic Application Security Testing, is a web application security technology that finds security problems in the applications by seeing how the application responds to specially crafted requests that mimic attacks. DAST tools are also known as web scanners and the OWASP foundation refers to them as web application vulnerability scanners. From a methodology point […]
SAST is an application security technology that finds security problems in the code of applications, by looking at the application source code statically as opposed to running the application. SAST is one of the three different approaches that Application Security Testing (AST) follows, the other two being DAST and IAST. As a summary, SAST was […]
SSRF is a type of web application vulnerability and the associated family of attacks that force a target server to execute requests against other resources that the target server has access to, including read and write operations to local and internal assets. The SSRF acronym stands for “Server-Side Request Forgery,” as the attacker forces the […]
Interactive Application Security Testing (IAST) application security tools complement and replace legacy Automatic Security Testing (AST) tools such as SASTs and DASTs. We believe that IAST tools are one of the best investments developers can make to improve the security of their applications. You can also browse our IAST Detection tool section in the Hdiv […]
At Hdiv we talk to lots of developers and infosec professionals. We have more than a few funny stories about the friendly rivalry -and sometimes not so friendly- between these two teams. Some people even call them tribes! Like Switzerland, we like to take a neutral position, and we strive for the common goal of […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
