What are your recommendations for application security scanning tools, both SAST and DAST

like
Posting as :
works at
You are currently posting as works at

I LOVE snyk. It has been a tool that I’ve used for about 6 months. It definitely filters out all the bs false positive.

When it comes to DAST, I am not a fan of many tools out there. I have used a bunch in my tenure of appsec.
Veracode - terrible UI. Good customer service.

Rapid7 - not truly a DAST as it is super invasive. More a pentest tool

Invicti - I believe it is probably the best tool I’ve used out of everything.

Qualys - it is probably my second go to tool.

Burp - thumbs DOWN.

I can go more in detail but I hate this character limitation! Let me know if you want a thorough review on each. I can do it!

Related Posts

I have an offer from Siemens as Product Manager and Stellantis(Fiat Chrysler Automobiles) as Technical Lead in Data Science domain. Salary is almost same in both organizations. Can you help me out in choosing the best considering Work Life Balance and salary hikes. Thanks in advance.

like

Hi Fishes,
I've reffred at Siemens by friends abs post that I got link from where I've applied within receipt of the link and now front past week application on my behalf I can see that it is with recruiters from last week I've not any call or email post that.
Whom shoud I connect or just wait for few more days?

After trying to make the shift from agency to in house for years, I just got offered a full-time digital marketing manager role at a tech company in the Bay Area! In researching salaries, the range seems huge in the Bay. Any advice on how to determine a reasonable number to bring to the table?

like

Any tips on how to deal with this…my entire team was let go today (was 5, now just me). We functioned as the Marketing team for 4 brands and primarily focused on product launches and sustaining social media content. My plan moving forward is to only focus on the top revenue driving product launches for now and say “no” to basically everything else. Would love to hear from anyone who has been in a similar situation and can offer some advice.

like

Looking to move to the client/ brand side of things from the agency world. Decades of successful experience running integrated marketing strategy and execution for major fortune 100 companies as well as start ups in B2B and B2C. Fintech, finserv, SaaS, tech, RE experience. Any leads would be appreciated.

like

Nice blast off over the last few days for QSP

Post Photo
like

Anyone still in Nano (Raiblocks)? 🔮what is the future looking like for this? 🔮

like

Good sushi place recommendations? Looking for Omakase for $100-200 pp

When will we able to see payslip in portal?

like

Can anyone refer me in Wipro. Thanks in advance.

How do Rolex waitlists work with respect to different models? Like if an AD could let me have a Sub, Exp 1 or 2, DJ, GMT, etc I would honestly take whatever is available first. Are there lists for specific models or is it sort of just one big pool?

like

How long after interviewing for a lateral position would you expect to hear back?

like

Assuming I’m justified in thinking I deserve a higher bonus/salary, who should I talk to about potential raises (HR, management, etc.)? Should I say that I’m considering other options? (Details below)

like

My least favorite reason to be working into Saturday evening is because the partner is not good at their job.

11am: you do B, C, D and I'll handle A. 6pm: please go ahead and get started on A.

likefunny

*Walks away slowly*

Post Photo
likefunny

Where to buy a 3 bed flat in London on a budget of £500-600k for max growth opportunities in the future? ~1000sqft, (share of freehold) or long lease, close to Crossrail. Or is it best to wait it out?

What are the fastest growing cyber security startups? What are the most scalable business models?

like

Does anyone work for the Bank of England and can tell me more about their culture, work-life balance and opportunities for career progression?

like

Has anyone done a self contained class and resource room at the same time

Any thoughts on Laronde?

like

Additional Posts in Cybersecurity Bowl

Any thoughts on the company Deep Instinct? So far, I am seeing good press and reviews.

like

Could you all please suggest or share any tips/key things to prepare for an upcoming AWS Partner SA, Security phone interview. Already prepared for LPs. Thank you.

like

I'm almost to the 2 year mark in my role of a SOC Analyst after graduating with a degree in Cybersecurity. During my time here, I've acquired the GCIH certification via a comprehensive SANS course Sec504. I've been applying everywhere but it seems we're in a rough season in tech. I'm new to fishbowl, would anyone here be interested in connecting?

Thank you!

like

Is 80k a year a good starting pay for a SOC Analyst with no certs, clearance and experience?

like

Anyone looking or know anyone looking for a job in Cybersecurity as App Security Analyst/Engineer?

like

Hi all - Trying to pivot into Cybersecurity/Infosec after 7 + years of experience in Network Engineering. No security related certifications. I have enough work experience in network security to match 60-70% of job requirements for infosec positions. Capable to get CEH/OSCP certifications in a few months, but want to wait until I get my foot into the door before investing 2-3K on these certs. Any advice for me will be greatly appreciated.

like

I am looking for a entry level position in cybersecurity.

like

What is the standard yearly hike in IT Security industry in North America? I have worked for 7 months in Threat Intelligence in a company in Canada, and I got a yearly hike of just 3% in my first appraisal cycle. My manager says that you get 3% when you are meeting expectations but not going above and beyond. Is this the standard or am I being underpaid? According to me, I haven't gone above and beyond every day, but there are some things I did work on exceptionally well.

like

Need help finding a cybersecurity job!

BS Cybersecurity (2021)
5+ YOE in IT

I have been looking for an entry level job in cybersecurity for more than a year now. It’s really frustrating I am not getting invited to interviews. Anyone willing to help with a referral, a resume review, or just a chat to help me improve my job search strategy? Thank you!

like

Currently looking for my first job in Cybersecurity. I have a 4 year degree in CIS and emphasis in Security, but no Certifications yet. Asking for advise- is it possible to get my first job in this field without having a Cert yet? Or do most companies want a degree and certs right off the bat?

like

Hi Everyone ,
I am a recent graduate from University of Leicester looking for SoC analyst roles , I have a question does being SoC analyst be considered a High clearance Job in the United Kingdom ? , Because all the Job role I have applied for the recruiters have been asking for clearance. Could anyone shed some light how I need to answer them or any tips would be greatly appreciated .

Regards
Jabez

I need help. I work in performance analytics, but leading projects surrounding privacy, consent, auditing, and a lot of things legal related. I already feel underpaid, but now I also feel like I'm being placed in charge of things above my pay scale, but maybe I'm wrong 🤷🏽‍♀️. Ref 70k range, 5+ yrs experience, educated and working on sec+ certs. Is this average pay? I don't even know what job title I would fall under with all things privacy security related. Tips/advice as I'm clueless tbh. I

like

When it comes to education and application of the knowledge, what is preferred, masters in cyber security or various cyber security certifications in regards to application at work?

like

Hello all,
Hope everyone doing well. I have my resume, and I need check it with formatting and everything. Anyone willing to help? I will be appreciate it.
My job now Desktop Support Analyst/ IT Security Associate. Thank you all

like

Hi everyone, I am new here! Looking for any Business Development Representatives /SDR's in the Chicago area! 1 year SaaS sales Experience required. $50K base 80K OTE! Please let me know if this could be an exciting for yourself and we can connect and set up an initial call!

Thanks in advance!

like

Hey everyone - I am trying to get an entry level position in cyber / info security. Got my BS Cyber and Info Security in 2021. Have 5+ YoE in IT Support. Based in Chicago. Anyone willing to provide a referral or share advice on how to get in? I am applying daily on LinkedIn and Indeed but barely getting interviews. Appreciate any help.

Hello there. I’m looking for an internship or entry level position in cybersecurity. Any leads? In the meantime what are your favorite online labs? I’m using TryHackMe for now.

like

Hey all, looking to switch from SWE to Cyber Security… Any suggestions or tips on the best way to get my foot in the door?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal