Blog

AppSec Blog

Web Security

PHP2Shell: Two critical PHP vulnerabilities require immediate patching

Web Security

How to detect broken object level authorization (BOLA) in APIs

Web Security

Fuzzing vs DAST: What’s the difference and do you need both?

Web Security

How authenticated API testing improves vulnerability detection

Web Security

How to discover APIs in Kubernetes and runtime environments

Web Security

How do you test for XSS in modern web applications?

Web Security

API discovery methods compared: Which finds shadow, zombie, and undocumented APIs?

Web Security

Invicti AppSec Core: More than an all-in-one AppSec platform

Web Security

ASPM tools with vulnerability deduplication: Reduce noise across AppSec findings