Application Security for Web App Security
Essential tools and best practices for securing software applications throughout their lifecycle. Task: Web App Security
Explore 20 curated tools and resources
RELATED TASKS
LATEST ADDITIONS
A tool for brute-forcing GET and POST parameters to discover potential vulnerabilities in web applications.
IronBee is an open source project building a universal web application security sensor.
An insecure web application with multiple vulnerable web service components for learning real-world web service vulnerabilities.
A tool to scan for CORS misconfigurations in web applications
Hackazon is a free, vulnerable test site with an online storefront to train and test IT security professionals on various vulnerabilities like SQL Injection and cross-site scripting.
A tool for identifying potential security vulnerabilities in web applications
A tool to profile web applications based on response time discrepancies.
A vulnerable by design infrastructure on Azure featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfigurations.
A PHP/MySQL web application designed to aid security professionals in testing their skills and tools in a legal environment.
Automatic tool for pentesting XSS attacks against different applications
ModSecurity is an open-source web application firewall that provides a flexible and scalable way to monitor and control HTTP traffic.
OWASP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application for client-server communication with numerous vulnerabilities.
A free online tool that scans and fixes common security issues in WordPress websites.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.