DevOps Fortify WebInspect Scanning

On September 12th, Jeremy Brooks and myself presented for 45 minutes at Micro Focus Protect 2017. The presentation was divided into two parts WebInspect’s roadmap, which included the proposed micro-service architecture, and Target’s new Open-Source project WebBreaker. Both with WebInspect’s future re-write and re-design along with WebBreaker, are providing greater agility and flexibility to deliver on industry trends, such as improved integration into the SDLC pipeline, Git workflows, etc.

Unfotunately, the presentation was not broadcasted or recorded on the Protect’s digital stream, however below are some of the videos used during our presentation.

Artifacts

• Command line foo with WebBreaker
• Jenkins WebInspect Scanning with WebBreaker

Links

• WebBreaker on GitHub
• WebInspect Python API Library
• Fortify SSC Python API Library
• ThreadFix Pro Python API Library

More Info

• WebInspect API
• Ty Sabano’s LinkedIn Post

Introducing Dynamic Application Security Orchestration (DASTO) with WebBreaker

WebBreaker is a Python application that provides orchestration for your open-source and commercial, automated web application testing products. Current support is limited to WebInspect and Fortify, but more to come!!

More Info

• Target’s WebBreaker on GitHub

Dynamically Controllable Scanning

How the WebInspect API will enable organizations to become more efficient at automating dynamic scanning with a continuous build environment and what advantages it has brought. Additionally, explore how WebInspect can help resolve issues with growing pains or inconsistent demand on the dynamic scanning infrastructure.

Artifacts

• Slides

More Info

• Dynamically Controlable Scanning