Automatable Security Regression Testing for your Applications and APIs

Joined April 2018
20 Photos and videos
Pinned Tweet
Ever wanted to invest into your #appsec #skills but not quite sure where to start? Come work on OWASP PurpleTeam purpleteam-labs.com and we'll assign a mentor to you
1
4
7
Large set of releases just dropped with lots of updates... including new reports & all source moved from CJS to ESM purpleteam-labs.com/doc/chan… #owasp #dast
1
PurpleTeam retweeted
🤔What is OWASP PurpleTeam? Join @binarymist as he briefly discusses the four-year journey that has brought PurpleTeam from a PoC to a production-ready Developer's first security regression testing CLI and SaaS. Register FREE: open-security-summit.org/ses… #OSS2022 #threatmodeling
4
3
Come and find out how #PurpleTeam (soon to be offered as an #OWASP member benefit) can help reduce security defects as your #Development Teams code
1
If you're keen to help contribute to OWASP PurpleTeam development check the Google Summer of Code ideas owasp.org/www-community/init… #gsoc #appsec

Upgraded CLI from CJS to ESM
Brand new set of unit tests created making the CLI more testable. Removed rewire dependency. Replaced stubs with dependency injection. #unittest #cli github.com/purpleteam-labs/p…
Details on getting more out of your PurpleTeam App scans with Next Steps: purpleteam-labs.com/doc/next… (just published) #AppSec #purpleteaming
Large set of releases just dropped with lots of upgrades purpleteam-labs.com/doc/chan… #purpleteam #devfirstsec
Stress testing. Outcomes confirmed that the CLI and back-end is happy with 12 Test Sessions (9 in this image) (That's 28 containers orchestrated by PurpleTeam, (4 stage 1, the rest stage 2))
We will be running a classroom workshop on setting up OWASP PurpleTeam Feb 16 2022 appsec.org.nz/conference/tra… BYO web app or API and get it under test #devfirst #security

1
1
3.0.0-alpha.3 just released affecting CLI, orchestrator, app-scanner. Release notes: purpleteam-labs.com/doc/chan… We now have support for APIs (OpenApi, SOAP, GraphQl, import of URLs). New API Job file: purpleteam-labs.com/doc/jobf…
PurpleTeam retweeted
Max the #officecat chilling
1
1
#TLS Tester integration/implementation and synchronisation details: owasp.org/blog/2021/12/01/Pu… #owasp #DevSecOps
1
1
v2.0.0-alpha.3 just released affecting CLI, orchestrator, app-scanner, s2-containers. Release notes accessible from: purpleteam-labs.com/doc/chan… . We now have a set of strategies so you can change many types of App Tester behaviours. #devfirst #security
1
PurpleTeam retweeted
Join us on a walk-through of why you would want #OWASP #PurpleTeam in your build pipelines, how to set it up & what the work-flows look like at usa.globalappsec.org/ #globalappsec #devsecops
2
1
Join us on a walk-through of why you would want #PurpleTeam in your build pipelines, how to set it up & what the work-flows look like at alldaydevops.com/ #2021ADDO #AllDayDevOps
1
1
Release Strategies now formalised: purpleteam-labs.com/doc/clou…
I'm participating in #hacktoberfest! How about you? Join me and register here: hacktoberfest.digitalocean.c…