This thesis presents an overview of web application security testing tools that can be integrated into the DevOps cycle. It includes a detailed description and the comparison of the tools OWASP ZAP, Wapiti and Arachni. Appropriate criteria are chosen for comparison and distinguishable pros and cons of each tool are presented. The thesis presents the DevOps environment and multiple ways of including security testing. An example of a working CI/CD pipeline with dynamic security tests of a web application is described. The purpose of this thesis is to present the reader some of the popular dynamic security testing tools that can be integrated in to the DevOps cycle. Additionally, it eases the choice of tools in different situations by juxtaposing the pros and cons of each tool.
|
