TestGuild Security Testing Podcast

In this episode we'll be talking with James Rabon, a Senior Product Manager at Micro Focus, all about tips to incorporate static analysis tools in your CI/CD pipelines. Discover best practices for successful SAST integration and about how machine learning can help us predict the future based on our past.

Is your website vulnerable to cross-site scripting vulnerabilities? In this episode, Gavin Johnson-Lynn talks all about his new Pluralsight course on getting started with BeEF. BeEF is a tool that allows cross-site scripting vulnerabilities to be investigated and exploited with minimal technical understanding. Discover how to use BeEF to exploit XSS and highlight just how critical this vulnerability can be to a website. Listen up

Are you looking for an approach to continuous security? In this episode, we'll talk with Julien Vehent about his book Securing DevOps: Security in the cloud. Discover why security is an integral component of your product development efforts, and how to use some best practices to help your teams implement security in your SDLC. Listen up!

I recently wrote a blog post on the 9 Top Automation Testing Trends for 2020. One quickly-growing trend I listed was security. Since then, I've been frequently asked for some useful resources to help folks get started learning about security. That's why I was excited to learn about HackEdu, an online training platform designed to help software developers to develop code more securely. Unlike other training you may have taken, HackEdu has a unique, hands-on training approach that will keep you engaged and learning actionable security tips you can put into place right away. In this episode, we'll be talking with Jared Ablon, Co-Founder & CEO of HackEdu, and Arthur Hicken, Chief Evangelist at Parasoft, about why security training is so essential for your teams. Check it out!

There are so many awesome tools for hackers out there. They work great if you're a pentester, but trying to use these tools in a way that makes sense for development and testing teams can be challenging. In this episode, Jahmel Harris, co-founder of Digital Interruption, shares his favorite security testing tools and the skills needed for developers and testers.

In this episode, Keith Watson, author of the Introduction to Penetration Testing Using Metasploit Pluralsight course will give us a high-level overview of how to get started with Metasploit, as well as some best practices for penetration testing.

Want to discover how to get security more integrated into your DevOps pipelines? In this episode, Tanya Janca, an Application Security and Cloud Security Consultant, shares her thought around security testing and how to shift your efforts left like a boss.

Not sure what security standards are out there or which ones you need to follow? In this episode, Arthur Hicken Chief Evangelist at Parasoft shares some of the most common standards in use today. Listen up and discover what standards you need to know for your security testing efforts and how to get started.

Very often, people are afraid of web application firewalls (WAF) because they can potentially block an application's legitimate traffic. No worries! In this episode, Franziska Buehler will share how you can avoid this problem and more. Discover how WAFs are a useful, additional layer of defense when it comes to fending off attacks such as those described by the "OWASP Top Ten." Don't miss it!

Happy New Year! In this episode we'll be going back in time to one of my most popular automation podcast episodes: How to Security Test Your APIs with Troy Hunt. Discover what you need to know about the basics of API security testing, including the tools and techniques you'll need to get started quickly in 2020.