View Details

I've interviewed Fortify Webinspect Product Manager, Shawn Simpson and asked all about WebInspect.

Fortify WebInspect is an automated dynamic testing solution that provides comprehensive vulnerability detection and helps security professionals and QA testers identify security vulnerabilities and configuration issues.

It does this by simulating real-world external security attacks on a running application to identify problems and prioritize them for root-cause analysis.

In addition, WebInspect has numerous REST APIs that benefit from integration and can be managed through an intuitive UI or run entirely via automation.

https://www.appsecsanta.com/fortify-webinspect

webinspect, #applicationsecurity

View Details

I've interviewed eShard CEO Hugues Thiebeauld and talked about mobile application security and esChecker mobile application security scanner. (MAST).

esChecker is a dynamic security scanning tool for Android and iOS mobile applications to test the apps' self-protection and identify vulnerabilities and misconfigurations with no false positives.

It executes your applications on real mobile devices and launches attacks to detect failures in self-protection on .apk or .ipa files.

Thanks to having its device farm, it has unique capabilities to trigger attack techniques like reverse engineering or code tampering.

It is an annual subscription that you can buy for a number of applications. It is $10k per application approximately.

There is no limit on users or how many times you can scan your applications during the year.

Full article: https://www.appsecsanta.com/eschecker

mobileappsecurity, #appsecsanta, #mobilesecurity