Securing Complex Web Applications with DAST Solutions

So originally, we had static web applications, right? They were just pages with information, and what we've seen is application complexity continue to increase to the world we have today. With single page applications, dynamic clients, and restful APIs. Dynamic scanners are always attempting to keep up with these changes, but inevitably we have dips in coverage where we have to re-innovate, and figure out ways to keep up with the changing technology. So if this is dynamic application security testing coverage, what we see is we have dips in the coverage. And a dynamic scanner can never actually cover 100% of an application, there are always things that have to be tested by hand like business logic, but you want maximum coverage.

Now one of the things we've seen in recent years, and that we've heard from security experts is that the coverage of their dynamic scanner has actually eroded in recent years in a more severe way than in the past. And instead of their application their dash scanner giving them more coverage, it's giving them less. And this erosion is something that security teams don't have time for. They need this coverage, so in these recent years with dynamic applications, and AJAX, and restful APIs, and single page applications, again there has been a wider coverage gap. At Rapid7, we are committed to keeping up with today's technologies, and tomorrow's technologies. So we're continually innovating, it's one of our specialties, and one of the things we tend to excel at is keeping this coverage gap closed. So with our technology at Rapid7, we're up here. We close the coverage gap.

Recently we wrote a white paper, a brief white paper that talks about the seven questions to ask your DAST vendor. Talk to your DAST vendor, use this white paper as a guide, it covers the key issues you need to address with your vendor to make sure you're getting maximum coverage, and maximum automation. And keeping up with application complexity is one of the issues we cover in this document.

And that's all for today's Whiteboard Wednesday. We look forward to seeing you next time.