Nightly ZAP baseline
Passive OWASP ZAP scan of the dev server on a nightly routine.
Automations · Security Testing
Security checks every night, owned by a security role.
Scans run while you sleep, and a dedicated role decides what each finding means.
Live in productionPeaceControl
RoutineNightly security routine, 02:00example
illustrative
What is Security Testing in agnte?
agnte security testing runs a passive OWASP ZAP baseline against the dev server daily, keeps a dependency audit baseline, and sends every security finding to the security role, which decides to fix now, fix later, close as not a bug, or ask for clarification, with a reason.
Capabilities
What Security Testing does
PeaceControl
Dependency audit baseline
Known issues are baselined so only new ones block.
Security role owns findings
A dedicated role decides each finding and records why.
Re-tested after fixes
A fixed finding is re-checked on the next deploy.
How it works
How Security Testing works
- Nightly routine starts
- ZAP and dependency audit
- Security role decides
- Fix, PR, re-test
FAQ
Questions about Security Testing
Is the ZAP scan active or passive?
Passive. agnte runs the OWASP ZAP baseline scan, which does not attack the application.
When do scans run?
Daily, as a nightly routine, so they do not compete with daytime work.
Who decides what to fix?
The security role, with a recorded reason for every decision.
Related