---
title: "Amanda Allen (@amandaallen) | Hashnode"
description: "Amanda Allen (@amandaallen) writes on Hashnode. Read their latest articles and follow their work."
url: "https://hashnode.com/@amandaallen"
---

@amandaallen

# Amanda Allen

@amandaallen · United States · Joined May 2026

### [5 Automated Tools for Finding Stored XSS in Modern Web Apps](https://amandaallen.hashnode.dev/5-automated-tools-for-finding-stored-xss-in-modern-web-apps?utm_source=hashnode&utm_medium=feed)

Cross-Site Scripting (XSS) remains a major web application security concern and is covered under OWASP's broader Injection category. While Reflected XSS requires tricking a user into clicking a malici

5 min read · [amandaallen.hashnode.dev](https://amandaallen.hashnode.dev/5-automated-tools-for-finding-stored-xss-in-modern-web-apps?utm_source=hashnode&utm_medium=feed)

[Sep 4](https://hashnode.com/posts/5-automated-tools-for-finding-stored-xss-in-modern-web-apps/6a9a9f59a9cc53019b9093fc)

### [How Developers Can Map Application Dependencies to Business-Critical Attack Paths](https://amandaallen.hashnode.dev/how-developers-can-map-application-dependencies-to-business-critical-attack-paths?utm_source=hashnode&utm_medium=feed)

Modern applications are rarely simple. A single feature may depend on several APIs, databases, authentication services, background jobs, third-party integrations, and internal services.  From a develo

5 min read · [amandaallen.hashnode.dev](https://amandaallen.hashnode.dev/how-developers-can-map-application-dependencies-to-business-critical-attack-paths?utm_source=hashnode&utm_medium=feed)

[Aug 18](https://hashnode.com/posts/how-developers-can-map-application-dependencies-to-business-critical-attack-paths/6a83ff9774a45b02ec2a089a)

### [How Engineering Teams Can Detect Real Attack Chains with AI Penetration Testing](https://amandaallen.hashnode.dev/how-engineering-teams-can-detect-real-attack-chains-with-ai-penetration-testing?utm_source=hashnode&utm_medium=feed)

Modern engineering teams have access to more security tooling than ever. SAST, DAST, dependency scanners, API testing, and automated penetration testing can all run at a scale that manual testing cann

6 min read · [amandaallen.hashnode.dev](https://amandaallen.hashnode.dev/how-engineering-teams-can-detect-real-attack-chains-with-ai-penetration-testing?utm_source=hashnode&utm_medium=feed)

[Aug 13](https://hashnode.com/posts/how-engineering-teams-can-detect-real-attack-chains-with-ai-penetration-testing/6a7d93ea32df759c4250a567)

### [How to Evaluate Automation Capabilities in an AI Pentesting Platform](https://amandaallen.hashnode.dev/how-to-evaluate-automation-capabilities-in-an-ai-pentesting-platform?utm_source=hashnode&utm_medium=feed)

Modern engineering teams have embraced automation across nearly every stage of software delivery. Code is built, tested, deployed, and monitored through CI/CD pipelines, allowing applications to evolv

4 min read · [amandaallen.hashnode.dev](https://amandaallen.hashnode.dev/how-to-evaluate-automation-capabilities-in-an-ai-pentesting-platform?utm_source=hashnode&utm_medium=feed)

[Jul 17](https://hashnode.com/posts/how-to-evaluate-automation-capabilities-in-an-ai-pentesting-platform/6a59e90e8bd861741e17e038)

### [Playwright-Based Application Journey Testing Patterns for Modern Engineering Teams](https://amandaallen.hashnode.dev/playwright-based-application-journey-testing-patterns-for-modern-engineering-teams?utm_source=hashnode&utm_medium=feed)

Learn how Playwright improves security testing by analyzing user journeys, workflow behavior, and authenticated application flows.

5 min read · [amandaallen.hashnode.dev](https://amandaallen.hashnode.dev/playwright-based-application-journey-testing-patterns-for-modern-engineering-teams?utm_source=hashnode&utm_medium=feed)

[Jun 25](https://hashnode.com/posts/playwright-based-application-journey-testing-patterns-for-modern-engineering-teams/6a3d1ccfd8b95a8c3da4e0e6)