Original Post: New: Burp Suite Enterprise Edition Unlimited pricing | Blog Matt Atkinson reported on March 30, 2023, that over 1,000 organizations are leveraging Burp Suite Enterprise Edition to scale their web vulnerability scanning. A… Read More »Introducing Unlimited Pricing for Burp Suite Enterprise Edition – A Game Changer in Web Security
Original Post: Announcing a Unified Veracode SAST and SCA IDE Plugin Veracode has announced a new Integrated Development Environment (IDE) Plugin for VS Code, combining Veracode Static Analysis (SAST) and Software Composition Analysis (SCA) into… Read More »Introducing Veracode’s All-in-One SAST and SCA Plugin for IDEs
Original Post: Security as a Quality Parameter in Sofware Development | by Osama Okunbo | Jul, 2024 In the digital era, ensuring security in software development is crucial due to the prevalence of cyber threats… Read More »Ensuring Excellence: The Vital Role of Security in Software Development by Osama Okunbo
Original Post: Testing autofix behavior of SAST rules The passage discusses the ease of writing custom rules for Semgrep and the introduction of autofix tests for these rules. Autofix is a feature that automatically transforms… Read More »Evaluating SAST Rule Performance: Autofix Behavior Under the Microscope
Original Post: New: Burp Suite Enterprise Edition Pay as you scan pricing | Blog The article, authored by Matt Atkinson and published on April 25, 2023, discusses the launch of Burp Suite Enterprise Edition’s new… Read More »Introducing Flexible Pricing with Burp Suite Enterprise Edition: Pay As You Scan
Original Post: Essential Cloud Security Tools for Effective DevSecOps The content emphasizes the importance of implementing a DevSecOps approach to minimize the cost of data breaches, particularly in a cloud-native environment, by using appropriate security… Read More »Top Cloud Security Solutions You Need for Robust DevSecOps
Original Post: CVSS Score — Understanding CVSS in Vulnerability Management – Akō A new guide on the Common Vulnerability Scoring System (CVSS) has been released, which aims to standardize the assessment of security vulnerabilities and… Read More »Decoding CVSS: A Guide to Understanding Vulnerability Scores for Better Management
Original Post: Shoulda, Woulda…Coulda In the context of Static Application Security Testing (SAST), findings are typically categorized into true positives (confirmed vulnerabilities) and false positives (non-vulnerabilities). A critical concern, however, is false negatives—vulnerabilities that the… Read More »Reflecting on Missed Opportunities and Regrets
Original Post: Keep it simple, Scanner | Blog Tom Shelton-Lefley discusses his recent work on tidying up the Burp Suite codebase, particularly focusing on the crawler component of Burp Scanner. Despite having a history of… Read More »Streamline Your Workflow: Essential Tips for Using Scanners Effectively
Original Post: Digital Operational Resilience Act (DORA): Compliance from a Software… The Digital Operational Resilience Act (DORA) is set to come into effect on January 17, 2025, aiming to establish security standards for companies in… Read More »Ensuring Compliance with DORA: A Guide for Software Developers