Application Security Testing
Vulnerability scanning became a continuously running part of the delivery pipeline.
At Invicti, security scanning had to cover every change without slowing the release pace. We developed the DAST flows across the web and API surface, the finding management around them, and the security controls embedded in the CI/CD pipeline, and took on scaling and day-to-day operation of the scanning infrastructure. Security verification stopped being an approval step at the end of the process and became a component that runs continuously inside the pipeline.
Similar work →