tools - Abhay Bhargav

Abhay Bhargav

Sign in Subscribe

tools

A collection of 6 posts

Building a Static Analysis Security Bot with Gitlab

application security Featured

Building a Static Analysis Security Bot with Gitlab

I am a big believer in Feedback loops. For me, DevSecOps is all about building better feedback loops. If I can get Dev or Ops folks to get quick security feedback on something they have written, with few/no false positives, in a workflow that they are used to, I

A List of Secure Defaults

application security

A List of Secure Defaults

I do a lot of work at the intersection of Continuous Application Security a.k.a DevSecOps, and Threat Modeling. I see that companies have started to take both these disciplines very seriously, especially today. This is not surprising. When you have rapid application delivery processes, the need to pre-empt

Why I am giving up on GraphQL (kinda)

graphql Featured

Why I am giving up on GraphQL (kinda)

I started playing around with GraphQL around 2 years ago. I was stunned by the power of the technology. Especially: * The ability to dynamically fetch different attributes at runtime without having to change the API itself * Speed of the fetches, even with large datasets * Subscriptions - Ability for the API

DAST Security Automation with a Markdown file

application security

DAST Security Automation with a Markdown file

I love automation and DevSecOps. Automation is a true force multiplier for already constrained Application Security teams. In my trainings on DevSecOps, one common problem that a lot of students come to me with is "How do I automate DAST?" Admittedly, DAST is hard. DAST products usually have