Simon Bennetts -- Using OWASP Zap across an Enterprise

Simon Bennetts is the OWASP Zed Attack Proxy (ZAP) Project Leader and a Distinguished Engineer at StackHawk, a company that uses ZAP to help users fix application security bugs before they hit production. He has talked about and demonstrated ZAP at conferences all over the world. Prior to making a move into security, he was a developer for 25 years and strongly believes that you cannot build secure web applications without knowing how to attack them. He's talked about and demonstrated ZAP at conferences all over the world. Prior to making the move into security, he was a developer for 25 years and strongly believes that you cannot build secure web applications without knowing how to attack them.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Simon Bennetts is the OWASP Zed Attack Proxy, or ZAP, project leader and a distinguished engineer at StackHawk, a company that uses ZAP to help users fix application security bugs before they hit production.
→ Learn more about Security Journey

Connect with Simon Bennetts:
→ OWASP ZAP
→ StackHawk

Mentioned in this episode:
→ OWASP ZAP
→ StackHawk
→ ZAP Heads Up Display (HUD)
→ Burp Suite
→ OWASP Juice Shop
→ OWASP Juice Shop
→ OWASP Web Security Testing Guide (WSTG)
→ OWASP Triangle Chapter
→ Docker

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Simon Bennetts: Using OWASP Zap across an Enterprise
04:20 We think about the things that ZAP is looking for, is
10:10 One of the things that is a new feature since the
14:59 Were not OWASP people, were not security people, and we've set
20:43 One of the other, you know, when I think about the
24:14 I've always been so impressed with what OWASP projects such as
29:10 I use this, when I integrate Zap into my pipeline, then
31:41 This, this was one of those questions where, like, this is
36:54 People are using this in the enterprise would be really powerful