Security Automation with Ansible 2

Running web application security scanners

This is the phase where the application went live to QA, stage, (or) Production. Then, we wanted to perform security scans like an attacker (black box view). At this stage, an application will have all the dynamic functionalities and server configurations applied.

These scanner results tell us how good the server configured and any other application security issues before releasing the replica copy into the production.

At this stage, most of the scanners just work at a certain level only. And we need to put some manual testing using human brain to find logical vulnerabilities and other security vulnerabilities that can't be detected by security scanners and tools.

As we have seen in other sections, ...