Blog

AppSec Blog

Web Security

PHP2Shell: Two critical PHP vulnerabilities require immediate patching

Web Security

Why DAST false positive rate is a metric you should be measuring

Web Security

How healthcare organizations manage HIPAA AppSec requirements with automated scanning

Web Security

The dangers of incorrect CSP implementations

Web Security

Iframe security best practices for web applications

Web Security

ASPM operating model: How to manage application risk at scale

Web Security

How continuous DAST supports PCI DSS 4.0.1 audits

Web Security

Reverse shell cheat sheet for defenders: Detection, prevention, payload anatomy

Web Security

Types of XSS attacks: Reflected, stored, DOM-based, and blind XSS