Cognitive DAST Automation

概要

This powerful tool streamlines Dynamic Application Security Testing (DAST) by integrating OWASP ZAP for comprehensive scanning with Google Gemini AI for intelligent, cognitive analysis of security findings. It employs a Model Context Protocol (MCP) server to orchestrate scans, analyze vulnerabilities, and provide advanced insights like risk scoring and prioritized remediation recommendations. Designed for seamless integration into CI/CD pipelines, it supports industry-standard output formats such as JSON and SARIF, making it compatible with GitHub Security, Microsoft Defender for Cloud, SonarQube, and other vulnerability management platforms.

主な機能

• Automated Risk Scoring and Prioritization
• Automated DAST Scanning with OWASP ZAP
• AI-powered Cognitive Analysis using Google Gemini
• Multiple Output Formats (JSON, SARIF)
• CLI Interface for scan execution and management
• 1 GitHub stars

ユースケース

• Automating security vulnerability detection in web applications
• Generating industry-standard SARIF reports for security platforms like GitHub Security or SonarQube
• Integrating dynamic application security testing into CI/CD pipelines