PortSwigger releases Burp AT for enterprise agentic pentests
Teams set scope and autonomy in advance, and Burp enforces those limits rather than the model.
1
Stories per day · 30 days
6 RSS
Relatedbright-security3fuzzing3wiz3aspm2checkmarx2harness2php2snyk2star-fuzzer2agentic-pentesting1agentic-testing1application-security1bug-bounty1burp1buyers-guide1contrast1coordinated-disclosure1corellium1
37 stories, newest first · one card per story
Stories tagged #appsec
AppSec Core ontology makes security guidance actionable
The AppSec Core ontology converts scattered security authorities into typed working sets for code changes and compliance duties.
Checkmarx says PHP patch rush shows remediation bottlenecks
A PHP advisory requires a runtime update because the attack path can run before application code.
Wiz CTO discusses PHP critical-bug cleanup on Equity podcast
Schwartz says he joined OpenAI, Calif and the PHP team after two critical bugs forced some sites offline.
Bright Security launches STAR Fuzzer for agentic application fuzzing
Bright says an open-source run found High or Critical issues in 45% of projects tested, with ten findings in eight projects.
Wiz describes ASPM prioritization with code-to-cloud context
The post explains finding enrichment, deduplication and attack-path scoring inside Wiz Code, not a new incident.
Pentera says the harness, not the model, makes agentic pentesting safe
Pentera Apps pairs a model that chooses tests with code that logs, pauses, and stops every action, and ships replayable exploit scripts.
2
Roundtable urges closing SDLC identity gaps before expanding AI
Participants say AI-written and non-developer code is outpacing how security is built into development.
1
ThreatModeler launches NexusAI to track architecture and propose updates
The assistant generates models from diagrams and documents, then flags design changes for human review inside ThreatModeler Nexus.
1
Bright Security launches STAR Fuzzer for agentic harness generation
The vendor says a first research run flagged High or Critical issues in 45% of projects tested.
3
12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing
A 2026 roundup compares 12 mobile AppSec tools for testing, shielding, and device virtualization.
4
10 Best RASP Tools Compared (2026): Features & Pricing
A 2026 buyer's guide compares ten RASP and runtime-protection products, led by Contrast and Waratek.
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
Wiz promotes ASPM connectors that centralize scanner findings and prioritize exploitable application risks.
11 Best API Security Tools Compared (2026): Features & Pricing
A 2026 roundup compares 11 API security tools, with Salt Security and Traceable rated highest.
8
9 Best IAST Tools Compared (2026): Features & Pricing
A 2026 comparison ranks nine IAST tools, led by Contrast Security, Seeker, Dynatrace, and Datadog.
Top 10 Best Secrets Detection Tools in 2026 [Ranked & Scored]
A 2026 ranking of secrets-detection tools puts GitGuardian first, then TruffleHog and GitHub.
4
Top 10 Best ASPM Platforms in 2026 [Ranked & Scored]
A 2026 ranking of ten ASPM platforms puts Cycode, Apiiro, and ArmorCode on the podium.
Top 10 Best SCA Tools in 2026 [Ranked & Scored]
A 2026 ranking of ten SCA tools places Snyk first, then Sonatype and Endor Labs.
9
Edgescan Atomic validates attack paths with controlled AI testing
Edgescan launched Atomic, an agentic-AI penetration-testing product that validates attack paths under a control harness.
2
Top 10 Best IAST Tools in 2026 [Ranked & Scored]
A 2026 IAST ranking puts Contrast Security first, then Black Duck Seeker and Datadog.
Top 10 Best DAST Tools in 2026 [Ranked & Scored]
A 2026 ranking scores ten DAST platforms, placing Burp Suite first for depth and published pricing.
6
Automation, AI agents or people? Sorting out who handles each security finding
ArmorCode survey of 200 security leaders finds enterprises struggle to triage findings as AI code outpaces review.
3
Introducing Wiz AI SAST: Application Security that Understands Your Code and Your Infrastructure
Wiz launched AI SAST in public preview to find code flaws traditional scanners miss.