Liminal Demo Day: Application Security in the Age of AI with StackHawk

StackHawk’s CSO and Co-founder, Scott Gerlach, provides a demo of the StackHawk platform, which focuses on API and application security testing, weaving security into the SDLC (Software Development Life Cycle) and AI. Key features demonstrated include:

➡️ API Attack Surface Discovery: StackHawk connects to code repositories, analyzes source code to identify what will become an API or web application, and alerts teams when new code is committed that will be part of the attack surface.

➡️ Open API Spec Generation: StackHawk can build and maintain an up-to-date Open API specification from source code, solving the problem of not having a spec when testing REST APIs.

➡️ Deterministic Testing with AI: StackHawk uses AI to understand how to test APIs but uses deterministic outputs to confirm if something is a vulnerability, ensuring issues do not disappear.

➡️ Business Logic Testing: The platform can perform business logic testing in environments like development, QA, and UAT where real data starts showing up, and even in production, to test for issues like broken function-level access or broken object-level access.

➡️ Application Security Platform Overview: Users get oversight into their application security program, including how much of their discovered attack surface is under test and the frequency of that testing.