Simon Bennetts -- Using OWASP Zap across an Enterprise

Simon Bennetts is the OWASP Zed Attack Proxy (ZAP) Project Leader and a Distinguished Engineer at StackHawk, a company that uses ZAP to help users fix application security bugs before they hit production. He has talked about and demonstrated ZAP at conferences all over the world. Prior to making a move into security, he was a developer for 25 years and strongly believes that you cannot build secure web applications without knowing how to attack them. He's talked about and demonstrated ZAP at conferences all over the world. Prior to making the move into security, he was a developer for 25 years and strongly believes that you cannot build secure web applications without knowing how to attack them.The Application Security Podcast is brought to you by Security Journey.About Security JourneySimon Bennetts is the OWASP Zed Attack Proxy, or ZAP, project leader and a distinguished engineer at StackHawk, a company that uses ZAP to help users fix application security bugs before they hit production.→ Learn more about Security JourneyConnect with Simon Bennetts:→ OWASP ZAP→ StackHawkMentioned in this episode:→ OWASP ZAP→ StackHawk→ ZAP Heads Up Display (HUD)→ Burp Suite→ OWASP Juice Shop→ OWASP Juice Shop→ OWASP Web Security Testing Guide (WSTG)→ OWASP Triangle Chapter→ DockerFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Simon Bennetts: Using OWASP Zap across an Enterprise04:20 We think about the things that ZAP is looking for, is10:10 One of the things that is a new feature since the14:59 Were not OWASP people, were not security people, and we've set20:43 One of the other, you know, when I think about the24:14 I've always been so impressed with what OWASP projects such as29:10 I use this, when I integrate Zap into my pipeline, then31:41 This, this was one of those questions where, like, this is36:54 People are using this in the enterprise would be really powerful