Tenable One Web App Scanning
Unify web app and API scanning that’s simple, scalable, and automated. Whether it’s the top 10 risks from OWASP, vulnerable web app components or APIs, get comprehensive dynamic application security testing (DAST) with Tenable One Web App Scanning.
Eliminate application exposure with automated and scalable web application vulnerability scanning
Get comprehensive web app security
Use automated DAST and API scanning from the industry's largest vulnerability research team to secure your modern web applications.
Tenable one
전 세계에 유일한 AI 기반 위험 노출 관리 플랫폼
Tenable One은 전체 공격 표면 전반에서 보안 가시성, 통찰 및 작업을 통합하여 사이버 위험을 줄여서 조직에서 중대한 약점을 빠르게 찾아서 수정하도록 지원합니다.
See why customers choose Tenable One Web App Scanning
Being able to manage our infrastructure and web apps in the same interface — and see a snapshot of the results in a single pane of glass — has been a real highlight and a big win for us as we continue to grow and expand our business.
Web app scanning FAQs
-
What are the web application scanning capabilities of Tenable One?
- Web application scanning is a critical part of the Tenable One exposure management platform. Tenable One Web App Scanning is a dynamic application security testing (DAST) application. A DAST crawls a running web application through the front end to create a site map with all of the pages, links, and forms for testing. Once the DAST creates a site map, it interrogates the site through the front end to identify any vulnerabilities in the application’s custom code or known vulnerabilities in the third-party components that comprise the bulk of the application.
-
What kind of vulnerabilities does Tenable One Web App Scanning identify?
- Tenable One Web App Scanning identifies OWASP Top 10 web application vulnerabilities, such as cross-site scripting (XSS) and SQL injection in custom application code and vulnerable versions of third-party components running on your site. 두 가지 범주의 취약성은 최신 웹 애플리케이션에서 포괄적인 취약성 보안 범위를 보장하는 데 필수적입니다.
-
Does Tenable One Web App Scanning identify misconfigurations or certificate issues?
- 예. You can use Tenable One Web App Scanning to identify a number of cyber hygiene issues in web applications in two minutes or less using predefined scan templates. SSL/TLS 스캔 템플릿은 부적절하게 발급되었거나 곧 만료될 SSL/TLS 인증서를 검사하여 높은 비용이 필요하고 당황스러운 브라우저 경고 및 리디렉션을 방지하도록 합니다. The Config Audit scan template checks for a number of server-side misconfigurations that leave web applications vulnerable to hacker reconnaissance or man-in-the-middle (MITM) attacks.
-
Can I tailor information that Tenable One Web App Scanning users have access to?
- 예. Tenable One Web App Scanning includes role-based access control (RBAC). 관리자는 사용자 그룹을 만들고 개별 스캔을 기준으로 스캔을 확인하고 실행하는 사용자 권한을 할당할 수 있습니다. Users will only see relevant scan data, so they can more easily focus their efforts and prioritize which vulnerabilities to remediate.
-
Can I create custom reports in Tenable One Web App Scanning?
- 예. Tenable One Web App Scanning gives users the ability to create a variety of dashboards to tailor their reporting needs. 미리 구성된 전체 요약 보고서를 사용하여 비즈니스 이해 관계자에게 팀의 수정 진행 상황을 기술적 세부 사항 누락 없이 알릴 수 있습니다. Tenable One Web App Scanning also allows users to create fully-custom dashboards of scan data to track metrics that are relevant to their teams. Tenable Vulnerability Management and Tenable Web App Scanning users can also create fully integrated dashboards combining IT, cloud, and web application vulnerabilities for unified visibility across their attack surface.
-
Does Tenable One Web App Scanning scan single page applications?
- 예. Tenable One Web App Scanning scans modern web applications, including single-page applications. While no scanning tool can guarantee 100% coverage of all application types and vulnerabilities, Tenable One Web App Scanning crawls and scans many of the most popular single-page application frameworks.
-
How often are new vulnerability detections added to Tenable One Web App Scanning?
- Tenable’s world-class Research Team built Tenable One Web App Scanning. Tenable Research continuously analyzes vulnerabilities and the threat landscape and adds new detections for third-party components and custom code vulnerability detection as it discovers new security issues.
-
Can I use Tenable One Web App Scanning to perform code reviews?
- 아닙니다. Web App Scanning in Tenable One provides dynamic application security testing (DAST), meant to test running applications and does not perform static code reviews. 정적 애플리케이션 보안 테스트(SAST) 도구는 코드 검토를 수행합니다.
Tenable One
데모 요청
전 세계에서 선도적인 AI 기반 위험 노출 관리 플랫폼입니다.
감사합니다
Tenable One에 관심을 가져 주셔서 감사합니다.
담당자가 곧 연락할 것입니다.
Form ID: 7469
Form Name: one-eval
Form Class: c-form form-panel__global-form c-form--mkto js-mkto-no-css js-form-hanging-label c-form--hide-comments
Form Wrapper ID: one-eval-form-wrapper
Confirmation Class: one-eval-confirmform-modal
Simulate Success