November Newsletter: Scan Telemetry, December Webinars, and More!

The Changelog: New Features to Kaakaww About

👀 Better Scan Telemetry for Troubleshooting

Fast test times are essential when you have StackHawk instrumented in your CI/CD pipeline. Our new Scan Telemetry will help you troubleshoot and optimize your scan times.

The new telemetry details that we’ve added to the scan plug-in summary allows you to see exactly how long each test is taking for your app, and optimize if your scan is taking too long.

Automating StackHawk in CI/CD

Adding security testing to the CI/CD pipeline enables engineering teams to catch security bugs early, leading to more efficient fixes and more secure applications. Today’s leading teams have shifted security left, running developer-first security testing programs.

While this is compelling in principle, putting it into action can be a bit more complicated. When should StackHawk run in my pipeline? How do I ensure fast builds while still having sufficient security test coverage.

Our new guide to running StackHawk in CI/CD gives some helpful tips and best practices to optimize your use of StackHawk automation.

Check it Out

December Webinars with StackHawk

This December, our schedule is packed with exciting new webinars. Mark your calendar so you don’t miss these events:

• Building Stronger Relationships Between Security and Engineering Teams [Lead Dev] December 8 • 9AM PT
  Learn practical steps for incorporating security testing into existing engineering workflows.

• Shifting Application Security Left: Practical Steps To Get There [Linux Foundation] December 9 • 9AM PT
  Join StackHawk CSO Scott Gerlach as he walks through how to shift security left, including a demo with various free and open source tools.

• AWS Live Hack: SAST and DAST with Snyk and StackHawk December 14 • 9AM PT
  Tune in as StackHawk and Snyk show you how to leverage developer-friendly security tooling in your CI/CD pipeline.

• Automating Security Testing with GitHub Actions December 16 • 8 AM PT StackHawk Senior Front End Engineer, Nick Teets, will be walking through how to automate three different types of security testing with GitHub Actions in this hands-on session.

Other Happenings

📺Hawk Talks

• JS Security Testing in GitHub Actions Workshop

• ZAP DeepDive: ZAP 2.11.0

• GraphQL Security Testing Technical Workshop

📖 Reading Material

• Why DAST Should Be Your First Application Security Priority

• [from the archives] Application Security Testing with StackHawk at DevOps Experience 2021

• [from the archives] Laravel Broken Access Control Guide: Examples and Prevention

📽 Virtual Events

• Nov 29 – Dec 3: AWS re:Invent

• December 6: Security Testing Workshop @ GraphQL Galaxy

• December 8: Building Stronger Relationships Between Security and Engineering Teams

• December 9-10: GraphQL Galaxy

• December 9: Shifting Application Security Left: Practical Steps To Get There

• December 14: AWS Live Hack: SAST and DAST with Snyk and StackHawk

• December 16: Automating Security Testing with GitHub Actions

💼Jobs @ StackHawk

• Software Engineer

• Solutions Architect

• Developer Advocate

• Head of Marketing

❤️ Give Us Some Love

Share the goodness of developer-centric application security. We are always grateful for recommendations and referrals! We’d love for you to share StackHawk with your friends and colleagues, or leave us a review on g2 .