Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Seeker® is an advanced interactive application security testing (IAST) tool that offers exceptional insights into the security status of your web applications. It detects trends in vulnerabilities relative to compliance benchmarks such as OWASP Top 10, PCI DSS, GDPR, CAPEC, and CWE/SANS Top 25. Moreover, Seeker allows security teams to monitor sensitive information, ensuring it is adequately protected and not inadvertently recorded in logs or databases without the necessary encryption. Its smooth integration with DevOps CI/CD workflows facilitates ongoing application security assessments and validations. Unlike many other IAST tools, Seeker not only uncovers security weaknesses but also confirms their potential for exploitation, equipping developers with a prioritized list of verified issues that need attention. Utilizing its patented techniques, Seeker efficiently processes a vast number of HTTP(S) requests, nearly eliminating false positives and fostering increased productivity while reducing business risks. In essence, Seeker stands out as a comprehensive solution that not only identifies but also mitigates security threats effectively.
Description
DefenseCode WebScanner serves as a Dynamic Application Security Testing (DAST) tool, specializing in thorough security evaluations of active websites. By simulating a multitude of attacks using sophisticated methods akin to those employed by actual hackers, WebScanner effectively assesses a website's defenses. This versatile tool is compatible with any web application development platform and can function even when the source code of the application is inaccessible. It accommodates a variety of prevalent web technologies like HTML, HTML5, Web 2.0, AJAX/jQuery, JavaScript, and Flash. With the capability to perform over 5,000 tests for Common Vulnerabilities and Exposures, WebScanner identifies more than 60 distinct types of vulnerabilities, including SQL Injection, Cross Site Scripting, and Path Traversal, as well as those outlined in the OWASP Top 10. Additionally, it is an essential resource for organizations seeking to enhance their web application security posture.
API Access
Has API
API Access
Has API
Integrations
Amazon Elastic Container Registry (ECR)
Azure Boards
Azure Repos
CircleCI
Cisco Vulnerability Management
CodeShip
Docker
Google Cloud Container Registry
JFrog Xray
Kondukto
Integrations
Amazon Elastic Container Registry (ECR)
Azure Boards
Azure Repos
CircleCI
Cisco Vulnerability Management
CodeShip
Docker
Google Cloud Container Registry
JFrog Xray
Kondukto
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Black Duck
Founded
2002
Country
United States
Website
www.blackduck.com/interactive-application-security-testing.html
Vendor Details
Company Name
DefenseCode
Founded
2010
Country
United States
Website
www.defensecode.com/web-security-scanner-dast/
Product Features
Application Security
Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation
Static Application Security Testing (SAST)
Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning
Product Features
Application Security
Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation