Hands-On Security in DevOps

Recommended security-testing tools

This can be a very broad area. Here is a typical set of security-testing tools, and we will discuss this further in later chapters. A minimum security testing scope includes the vulnerability scan, port scan, web security, fuzz testing, secure configuration, and so on. Each security testing area is suggested to use at least two security tools to cover more testing scenarios. Take a look at this table:

Security-testing area	Suggested security-testing tools
Vulnerability scan	Nessus, OpenVAS, Retina: These are common open source tools to scan vulnerabilities of the applications, web services, and all the software dependencies.
Port scan	Nmap: Nmap is widely used for network security scanning. ...