Damn I was working on a similar blog post, I'll have to publish it sooner than later. Granted this is kind of a marketing piece for their platform.
The idea of using automated tests for some of these scenarios is kind of a stretch, e.g. Incorrect Output handling, you wouldn't write automated tests for SQL injection or XSS as part of your SDLC. Same thing for output handling IMO. I guess as a one off scan from a auditor it can be useful.
4 comments
[ 3.6 ms ] story [ 16.6 ms ] threadThe idea of using automated tests for some of these scenarios is kind of a stretch, e.g. Incorrect Output handling, you wouldn't write automated tests for SQL injection or XSS as part of your SDLC. Same thing for output handling IMO. I guess as a one off scan from a auditor it can be useful.