Popular SAST, DAST and RASP Toosl for DevSecOps

Static Application Security Testing (SAST)

• OWASP SonarQube for Code Scanning

Dynamic Application Security Testing (DAST)

• Fortify Webinspect for Dynamic Application Security Testing (DAST)
• AppScan on Cloud

Runtime application self-protection (RASP)

• Twistkock – Understanding and Implementing Security aspect of Docker()
• Notary – Understanding and Implementing Security aspect of Kubernetes()
• NewRelic – Understanding and Implementing Security aspect of Java Virtual Machine
• AWS Security service – Understanding and Implementing Security aspect of AWS cloud.
• Chef InSpec – For Scanning your applications and infrastructure
• ELK – For Log analysis related to Security Threat.
• HashiCorp Vault – For security tool for certificates, API keys, or passwords
• Fortify Application Defender – For Runtime Application Security Testing (RAST)

• Author
• Recent Posts

Follow me

Rajesh Kumar

Mentor for DevOps - DevSecOps - SRE - Cloud - Container & Micorservices at Software AG

Join my following certification courses...
- DevOps Certified Professionals (DCP)
- Site Reliability Engineering Certified Professionals (SRECP)
- Master in DevOps Engineering (MDE)
- DevSecOps Certified Professionals (DSOCP)
URL - https://www.devopsschool.com/certification/

My Linkedin - https://www.linkedin.com/in/rajeshkumarin

Follow me

Latest posts by Rajesh Kumar (see all)

• Implementing Managed IT Services: A Step-by-Step Guide - August 30, 2024
• DevOps Foundation Certification - August 29, 2024
• SRE Foundation Certification - August 29, 2024