Hi saidy, What good is a tool if you can't trust it? Legacy DAST scanners often reported vulnerabilities that weren't there. These false positives created noise in the system and required teams to choose between manually verifying each scan result or sending developers issues that didn't exist. Netsparker's Proof-Based Scanning was explicitly created to solve this problem. Our internal testing and customer feedback told us that this feature was a game-changing solution, but we couldn't back it up with data - until now! We analyzed six years of data to determine how often Netsparker provides automatic confirmation in real-life application environments and how accurate these confirmations are. The results were pretty impressive. |
No comments:
Post a Comment