Application Security Testing
What is Application Security Testing?
The process of evaluating software applications for security vulnerabilities using techniques such as static analysis, dynamic analysis, and interactive testing.
Terms that appear alongside application security testing
Each of these is named in at least one of the same controls as application security testing. The number is how many controls name both.
- security testing 14 shared controls
- application security 14 shared controls
- dynamic application security testing 5 shared controls
- owasp 4 shared controls
- secure coding 4 shared controls
- interactive application security testing 4 shared controls
- vulnerability 3 shared controls
- software composition analysis 3 shared controls
Frameworks that govern application security testing
What the standards actually require on application security testing
Requirements naming application security testing across 6 standards, quoted from the control text.
Integrate dynamic application security testing into the delivery workflow as a gating control, so results can prevent vulnerable builds reaching production.
ASBv3-DS-5 · Integrate dynamic application security testing into DevOps pipeline →Integrate routine static, dynamic, and interactive application security testing throughout the development and deployment lifecycle.
ZTMM-APP-TEST · Applications Pillar: Application Security Testing →Test applications for security before release against defined acceptance criteria covering new systems, upgrades and versions, automating the testing where the delivery pipeline allows.
CCM-AIS-05 · Automated Application Security Testing →Applications undergo SAST, DAST, dependency scanning, and penetration testing with remediation tracking.
IS-IV.E.2 · Application Security Testing →All software artefacts are tested to detect known weaknesses using static application security testing (SAST), dynamic application security testing (DAST) or software composition analysis (SCA), depending on the software artefact type, before being imported in...
ISM-2028 · All software artefacts are tested to detect known weaknesses using static application secu →Build vulnerability detection into the software development process for the service, using a risk based mix of static and dynamic application security testing, expert code review and monitoring of confirmed flaws in third party libraries, then rate severity an...
C5-PSS-02 · Identification of Vulnerabilities of the Cloud Service →Questions people ask about application security testing
What is Application Security Testing?
Why is Application Security Testing important for compliance?
Which compliance frameworks address Application Security Testing?
Where can I learn more about Application Security Testing?
See how Application Security Testing applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.