Hands-On Security in DevOps

Web automation testing tips

Simply install and launch OWASP ZAP. Active and passive scanning can only give us a preliminary testing result for public web services. The following table contains some suggested tips to improve the testing efficiency and effectiveness for uses of web automation testing tools, such as ZAP or Arachni:

Testing tips	Description
Integration	To do automated integration, try to understand that the web security tools provide the following: Headless execution mode Command-line interface REST API Jenkins plugin (this may be optional as long as one of te preceding tools is provided) For example, the OWASP ZAP (https://github.com/Grunny/zap-cli/) provides the ZAP CLI interface, which also helps make the integration ...