How to Test Security Vulnerabilities Without a Red Team
from Software Testing with Fexingo: QA, Automation, and Reliable Software Engineering Hosted by Fexingo
Episode 159 of Software Testing with Fexingo digs into security testing for everyday QA teams. Lucas and Luna explore how a small fintech startup caught a critical authorization flaw using simple fuzzing and threat modeling — no dedicated security engineers needed. They walk through concrete techniques: mapping attack surfaces, fuzzing JSON inputs, testing for broken access control, and using OWASP ZAP for automated scans. They also discuss why security testing is a mindset, not a tool, and how to weave it into your regular regression suite. If you've ever wondered where to start with security testing, this episode gives you a practical, low-cost playbook. Supporting the show at buy me a coffee dot com slash fexingo keeps these conversations ad-free and accessible. #SecurityTesting #QA #Fuzzing #ThreatModeling #OWASP #ZAP #AccessControl #Fintech #Automation #RegressionTesting #Tech #Business #FexingoBusiness #BusinessPodcast #SoftwareEngineering #DevOps #CyberSecurity #TestingTools Keep every episode free: buymeacoffee.com/fexingo
Embed this episode
No transcript yet.