AAAmanda Alleninamandaallen.hashnode.dev·5d ago · 5 min readHow Developers Can Map Application Dependencies to Business-Critical Attack Paths Modern applications are rarely simple. A single feature may depend on several APIs, databases, authentication services, background jobs, third-party integrations, and internal services. From a develo00
AAAmanda Alleninamandaallen.hashnode.dev·Aug 13 · 6 min readHow Engineering Teams Can Detect Real Attack Chains with AI Penetration TestingModern engineering teams have access to more security tooling than ever. SAST, DAST, dependency scanners, API testing, and automated penetration testing can all run at a scale that manual testing cann00
AAAmanda Alleninamandaallen.hashnode.dev·Jul 17 · 4 min readHow to Evaluate Automation Capabilities in an AI Pentesting PlatformModern engineering teams have embraced automation across nearly every stage of software delivery. Code is built, tested, deployed, and monitored through CI/CD pipelines, allowing applications to evolv00
AAAmanda Alleninamandaallen.hashnode.dev·Jun 25 · 5 min readPlaywright-Based Application Journey Testing Patterns for Modern Engineering Teams Security testing has a visibility problem. Most application security tools spend the majority of their time scanning pages that anonymous users can access. They identify missing headers, exposed para10
AAAmanda Alleninamandaallen.hashnode.dev·Jun 8 · 4 min readWhy Broken Access Control Continues to Dominate Web Application Security in 2026Web application security has evolved significantly over the last decade. Organizations invest heavily in security testing, secure development practices, cloud security, and automated scanning. Yet one10
