Finally, a win-win-win for development, QA, and security! If your development team is looking for easy ways to integrate security earlier in a way that ’ s simple, easygoing and that your team to understand, we may hold a solution for you. Security defects are like any early flaw. Finding them other saves money and time. There are tools that execute security tests for protection professionals - likeRapid7& # x27; s (formerly NT OBJECTives)AppSpider. AppSpider can use the application noesis defined Selenium scripts to execute a better, more comprehensive security test on an application.

The problem has perpetually been that developers and testers cognize the application and protection teams know security. It & # x27; s been hard for the two squad to collaborate to build security earlier into the ontogenesis lifecycle. This solution combines the development team ’ s knowledge about the covering is bewitch in the Selenium scripts with the Security teams ’ expertise built into their protection tests.

It has long been known that fixing defect earlier in the package maturation lifecycle is less expensive and easier than fixing them afterwards. The same is true for security defects - it is easygoing and less expensive to fix them when they are establish earlier, before they are replicated across the coating. To that end, integrating protection testing sooner into the lifecycle, create perfect sense.

So, why wait for the protection squad to find defects toward the end of development when you can build it into your process - especially your CI process - so it & # x27; s automatic and early! It will make your life easier. Security defects will be reported alongside all of your other Selenium/SauceLabs defects. With this integration, you can incorporate a security tryout with real rattling little additional employment.

Now development and security can form an effective partnership with development creating test book to make sure the application works and security teams adding in the security auditing. Encourage your security team to leverage combine your team ’ s Selenium scripts with their security tests!!

How Rapid7 ’ s AppSpider Works with Sauce

Development & amp; QA teams typically record a series of Selenium scripts to test specific application functionality (e.g., create an account, select a product, purchase your items). The collection of these scripts guarantees that the application is tested in its integrality. Our partnership countenance protection and QA groups to leverage these scripts to test the applications for security vulnerabilities.

AppSpider integrate with both the cloud adaptation of Selenium that Sauce Labs offers as well as local installations of Selenium.[More on how AppSpider act with Selenium in another blog].

All an initiative has to do is configure the addition of the Selenium playscript into AppSpider, Radid7 ’ s automated vulnerability assessment tool, and start a scan.

Rapid7

Rapid7 offers an array of scalable web application protection service and solutions designed to see the unparalleled needs of our node. These days, finding an accurate, comprehensive web coating security scanner is difficult, as many scanning solutions are only subject of scanning HTML – leaving you with less coverage and less exact results.

However, Rapid7 ’ s fully-automated AppSpider dynamicapplication protection scannermake what many scanning solvent do not – we interpret and attack today ’ s modernistic applications build with rich clients, mobile customer and web services. (Using technologies like REST, AJAX, JSON and GWT) providing total coverage of your mobile and web applications, because we understand that reporting is the first step of accuracy. We also offer the same extensive scanning solution, AppSpider On-Demand, in one convenient, easy-to-useSaaS/cloud offering– that can be leveraged without purchasing or installing scanning software.

SUSA automates exploratory testing with persona-driven behavior, catching bugs that scripted automation misses.

What does this mean?

The AppSpider and Selenium consolidation enables you to mechanically detect protection defects earlier in the software development lifecycle, such as during the nightly build operation.

The welfare of leverage the combined solution are:

• Find security fault early - build security prove processes early into the lifecycle to chance security fault betimes and save money.

• Streamline defect account - study protection defects like any other defects reported in Selenium.

• Integrate with CI - many development teams are using Continuous Integration solutions (such asHudson or Jenkinsor home big resolution) to streamline testing and speed clip to marketplace. Developers, testing teams and security teams are looking for ways to plug their employment into the CI to see that all relevant examination operation are automated during the tests. With Sauce Labs ’ and Rapid7 ’ s, developers, testers and security experts can automatically integrate re-usable, pre-defined tests into nightly builds.

• Speed up ontogeny - by impart AppSpider security testing into your SauceLabs Selenium examination, you can speed development by obviate late degree breakthrough of protection defects.

• Make security testing easy - this combined solution is designed to enable you to fulfil repeatable, comprehensive test automatically. It & # x27; s project to make life easier for development teams.

• Streamline reporting - protection and functional examination use the same Selenium scripts so that all defects are reported in the same way.

• Mobile examine supported - both Rapid7 and Sauce Labs are perpetrate to supported the technologies used in today ’ s covering. That include roving applications. Both Rapid7 and Sauce Labs have support for testing your mobile applications.

Combine Sauce Labs and AppSpider - so unproblematic, yet it makes so much sense!

More information

• Blog: Fix Security Defects Earlier with AppSpider and Selenium

• Whitepaper:The case for integrating Selenium and AppSec Testing

More aboutSauce Labs