About this issues, there're a bunch of tools which are very helpful in a specific way.
The first tool you can try out is Static Application Security Testing tools (SAST) - which will help you analyze the application's code before complication. That would mean you can detect all your security vulnerabilities very early, which is a cheap and easier solution for fixing security's flaws.
Or you can give Dynamic Application Security Testing (DAST) a look. The difference between the 2 tools is that DAST examines the application while it's running. For run-time issues, this is the best.
|