Glossary 🧩 AppSec

Application Security

Secret scanning

Searches code and repositories for accidentally included passwords, API keys, and other secrets.

Why this matters

If your business runs a website, online store, or custom app, flaws in that code or its add-ons can expose customer data.

You might see this as

GitHub Advanced SecurityVeracode

More in AppSec

SASTStatic Application Security Testing analyzes source code for security flaws without running the program.DASTDynamic Application Security Testing probes a running application from the outside, the way an attacker would.SCASoftware Composition Analysis checks third-party and open-source components for known flaws and license issues.Code reviewAnother person examining code changes before they are merged, including looking for security mistakes.Dependency scanningAutomatically checks the libraries a project relies on for known vulnerabilities and available updates.API securityProtecting Application Programming Interfaces, the connections apps use to talk to each other, with authentication, limits, and testing.DevSecOpsBuilding security checks into everyday development and deployment workflows instead of leaving them to the end.

Want help with appsec?

Tell me what you have and I'll tell you which few things actually matter for you.

Get in touchSee what I offer