Wallarm Framework for Application Security Testing (FAST) by Wallarm enables ongoing security testing as part of CI/CD. It integrates into CI/CD via Wallarm API, FAST Node, Jenkins plugin, and CircleCI orb. WallarmFAST automatically adds vulnerability testing coverage for APIs which have never been tested for security issues before. It uses its fuzzer and known security payloads to automatically create and run 1000X security tests for every functional test. WallarmFAST transforms existing functional tests into security tests in CI/CD. A special proxy captures requests to API as baselines and creates and runs security checks for every build. It uses OWASP Top 10 defaults or allows users to specify their own testing policies, like types of parameters to test, payloads, or fuzzer settings. WallarmFAST reports security issues and anomalies to the CI pipeline and ticketing system. It sets up cross-team workloads via existing DevOps and security toolchain. WallarmFAST tests APIs (REST, SOAP, etc.), both legacy and modern web applications, and identifies OWASP Top 10 issues like XXE, SQLi, RCE, XSS. It leverages pre-defined tests, fuzzer, or allows users to create custom checks. WallarmFAST maintains session context, defines and detects anomalies and vulnerabilities, and allows users to define, start, and stop tests via Wallarm API. It automates API testing with auto-generated and/or user-provided OpenAPI Specs and easily integrates with any CI and testing tools/frameworks already in action.
