AAAmanda Alleninamandaallen.hashnode.dev·Sep 4 · 5 min read5 Automated Tools for Finding Stored XSS in Modern Web Apps Cross-Site Scripting (XSS) remains a major web application security concern and is covered under OWASP's broader Injection category. While Reflected XSS requires tricking a user into clicking a malici00
AAAmanda Alleninamandaallen.hashnode.dev·Aug 18 · 5 min readHow Developers Can Map Application Dependencies to Business-Critical Attack Paths Modern applications are rarely simple. A single feature may depend on several APIs, databases, authentication services, background jobs, third-party integrations, and internal services. From a develo00
AAAmanda Alleninamandaallen.hashnode.dev·Aug 13 · 6 min readHow Engineering Teams Can Detect Real Attack Chains with AI Penetration TestingModern engineering teams have access to more security tooling than ever. SAST, DAST, dependency scanners, API testing, and automated penetration testing can all run at a scale that manual testing cann00
AAAmanda Alleninamandaallen.hashnode.dev·Jul 17 · 4 min readHow to Evaluate Automation Capabilities in an AI Pentesting PlatformModern engineering teams have embraced automation across nearly every stage of software delivery. Code is built, tested, deployed, and monitored through CI/CD pipelines, allowing applications to evolv00
AAAmanda Alleninamandaallen.hashnode.dev·Jun 25 · 5 min readPlaywright-Based Application Journey Testing Patterns for Modern Engineering Teams Security testing has a visibility problem. Most application security tools spend the majority of their time scanning pages that anonymous users can access. They identify missing headers, exposed para10
