AppSec Blog

Keep up with the latest news on cybersecurity, technical trends, and programming best practices.

Category: Software Testing

Recent Posts

SAST vs. SCA: What’s the Difference?

Many different types of security tests are available to developer teams. However, some can only work in specific environments, and others might only work once the application runs. That’s precisely why SAST and SCA are so important for protecting your applica...

Proactive choosing of code scanning tools graphic

The Benefit of Using SAST Tools During Code Review

With malicious actors getting smarter than ever, developers must stay one step ahead when protecting their applications from security threats. However, it can be challenging to rely solely on humans to detect problematic areas during the code review process, ...

Risk Management Software Testing

How AI Is Changing Application Security Testing

As organizations increasingly rely on digital solutions to stay competitive, the importance of application security has skyrocketed. In response to this growing need, AI is stepping into the spotlight, transforming how organizations approach application secur...

DevSecOps Industry AppSec Software Testing Trends

Combining SAST and SCA Tools for Comprehensive Security

Learn how cybersecurity teams can combine SAST and SCA into a comprehensive cybersecurity strategy.

DevSecOps Programming Language Risk Management Software Testing

Proactive Security Scanning and Testing Pre-Empts Attacks

Best security practices dictates that avoiding trouble is faster, cheaper and easier than fixing trouble after it manifests.

Risk Management Software Testing

Static Analysis in Automated Software Quality Tests

Software quality management solutions function with automated tests that use static analysis processes to generate software quality metrics. With the ability to parse code in almost every commonly used programming language, stati...

Risk Management Software Testing

The Role of SAST in DevSecOps

Investments in artificial intelligence are predicted to reach $200 billion by 2025, fueled by predictions that advancements in generative AI and machine learning will result in massive productivity gains. Unfortunately, this bright future has a dark side as w...

DevSecOps Software Testing

SAST and SCA: Putting the Puzzle Together

Most developers don’t build applications from scratch. Instead, they use a mix of original development, code reused from other programs, and some third-party components. What often happens is that developers get deep into the weeds of making sure it all works...

DevSecOps Software Testing

Why SAST Is Crucial for Web and Mobile Application Security

People want choices in how they access online services. They expect to be able to log into a website if they’re on their computer or download an app to their smartphone for convenience. Businesses today are responding to this demand for multichannel opt...

DevSecOps Industry AppSec Software Testing

Kiuwan Local Analyzer vs. IDE Plug-In: What’s the Difference?

Kiuwan provides SAST and SCA solutions that use an on-premise standalone Java application for the scanning of source code, then sends the results file to the Kiuwan cloud for augmentation and additional analysis. This Java scanner is calle...

DevSecOps Kiuwan Software Testing

Differentiating Local Analyzer and IDE plugin graphic

DAST, SAST, IAST, and SCA: Comparing the Technologies

Application security testing (AST) requires a comprehensive approach that can catch modern, sophisticated threats from multiple angles and covers all attack surfaces. Unfortunately, you can’t mount such a multi-tiered defense with only one tool. You’ll need d...

DevSecOps Industry AppSec Kiuwan Software Testing

How On-Premise Solutions Are Going Hybrid

Food for Thought: On-premises Goes Hybrid Using application security testing (AST) tools has many benefits; for example increasing the speed, efficiency and coverage paths for testing applications. However, there are many reasons why individuals may feel inse...

DevSecOps Kiuwan Software Testing