WebGuard is a tool to integrate in Production Pipelines to help identify security bugs right in the pre-production stage, thus reducing the time to prodution significantly.
WebGuard uses ZAP Proxy Server as a backend, completely abstracted from the user in the form of a Web UI or API. WebGuard provides user with a proxy IP address which the user can enter in their browser and continue browsing the application like normal. Once done, returning to WebGuard the user can inititate a scan of the URLs list and view vulnerability report on the dashbard itself. WebGuard also allows user to run multiple ZAP Instances to segregate their project workspaces.
WebGuard provides a robust REST API that can be used to integrate into scripting or tools like Jenkins to trigger application flows directly from the building phase.
Some features of WebGuard include:
- Easy deployment using a single install script
- Web UI/API Layer and ZAP layer exist on separate servers, allowing the user to spawn more ZAP Instance servers for increasing load.
- Completely REST API driven
Show less