Rapid7 AppSpider Technical Overview by E-SPIN

Application Assessment for the Modern World

Web application security testing to close the gaps in your apps

AppSpider lets you collect all the information needed to test all the apps so that you aren’t left with gaping application risks.

AppSpider automatically finds vulnerabilities across a wide range of applications— from the relatively simple to the most complex—and it includes unique capabilities that enable teams to automate more of the security testing program across the entire software development lifecycle, from creation through production.

Coverage is the first step to scanner accuracy. Scanners were originally built with a crawl and attack architecture, but crawling doesn’t work for web services and other dynamic technologies. AppSpider can still crawl traditional name=value pair formats like HTML, but it also has a universal translator that can interpret the new technologies being used in today’s web and mobile applications (AJAX, GWT, REST, JSON, etc.).

With AppSpider, you can:

• Close the coverage gap with our universal translator
• Intelligently simulate real world attacks
• Continuously monitor your applications
• Stay authenticated for deep assessment
• Conduct deeper analysis with interactive reports
• Quickly replay web attacks
• Categorize applications for easy reporting
• Manage and control application security programs
• Automate targeted virtual patching
• Meet compliance requirements
• Integrate into your DevOps workflow

PRIORITIZE WHAT MATTERS MOST

AppSpider includes interactive actionable reports that prioritize the highest risk and streamline remediation efforts by enabling users to quickly get to and analyze the data that matters most. With one click, you can drill deep into a vulnerability to get more information and replay attacks in real-time.

Sifting through pages and pages of vulnerabilities in a PDF report takes too much time. AppSpider provides interactive actionable reports that behave like web pages with great organization and links for deeper analysis.

Analysis is easy because findings are organized and consolidated by attack types (XSS, SQLi, etc.), and with one click, you can drill deep into a vulnerability to get more information. AppSpider’s sophisticated reports reduce remediation time and streamline communication with developers.

This video is about Rapid7 AppSpider Technical Overview by E-SPIN that will give you more information regarding this product.

For those who can not join us for the session, please see the summary and highlight clip for the event.

If you have any inquiry or questions, feel free to contact E-SPIN for solution, product and project requirements.