API World 2023 + AI DevWorld 2023

Tiago Mendo, Probely, CTO

Have you ever tried to add a web application security scanner to a CI/CD pipeline?
I intend to draw attention to some of the challenges that development/security teams experience when trying to automate security tests.
The objective is to make the audience aware of these problems so that they can solve them as soon as possible, increasing the success of the tests, and the adoption by the teams, which in the end, will lead to greater security for the organization.
The focus will be on problems such as the scale of tests, speed of obtaining results, false positives and how these can destroy the process - or make it more expensive, and the use of the tools itself. All problems will be based on real situations, with examples whenever possible. I will propose solutions for different teams' maturity levels, giving practical tips to start implementing security in the developers' pipeline.