World Congress 2024 • Aug 29, 2024 • Session details

It's a (testing) trap! - Common testing pitfalls and how to solve them

Ramona Schwering

Your end-to-end tests are secretly your best security tools. Discover how to repurpose Cypress and Playwright into automated defenders against critical OWASP vulnerabilities.

Starting at 5:15 · Watch from the beginning

It's a (testing) trap! - Common testing pitfalls and how to solve them thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann

Chris Heilmann +2 · LIVE

4:19 min

Plants vs zombies as an analogy for web security

Ramona Schwering

Ramona Schwering · LIVE

2:10 min

Summary of security testing strategies and best practices

Ramona Schwering

Ramona Schwering · LIVE

4:00 min

Evolution from manual hacking to automated security testing

Chris Wysopal

Chris Wysopal · World Congress 2024

2:39 min

Shifting security testing focus toward critical application logic problems

Julian Totzek-Hallhuber

Julian Totzek-Hallhuber · World Congress 2026 Europe

4:48 min

Using intentionally vulnerable applications for practical security training

Bozidar Spirovski

Bozidar Spirovski +1 · Coffee With Developers

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher +3

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre · Osedea

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim · Neo4j

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush · Dynatrace

Livecoding with AI thumbnail

Livecoding with AI

Rainer Stropek · software architects

Dapr in Practice thumbnail

Dapr in Practice

marcklefter · AxonIQ

Upcoming sessions on this topic

The Illusion of Green: Why AI-Generated Browser Automation Tests Pass Locally but Fail in CI

Puja Jagani

BrowserStack

Lead of Open Source and Developer Advocacy

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

When Caches Lie: Solving Transactional Integrity and Distributed Race Conditions in Spring Boot

Shuchita Prasad

JPMorgan

Senior Lead Engineer

What I Got Wrong Shipping an MCP Server for Live Infrastructure

Pritesh Kiri

Harness

Developer Relations Engineer

Related videos

Plants vs. Thieves: Automated Tests in the World of Web Security thumbnail

Plants vs. Thieves: Automated Tests in the World of Web Security

Ramona Schwering

LIVE · Dec 2024

Software Security 101: Secure Coding Basics thumbnail

Software Security 101: Secure Coding Basics

Thomas Konrad

World Congress · 2021

Securing Your Web Application Pipeline From Intruders thumbnail

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

LIVE · Oct 2020

Spot, Squash, Secure: Fighting Security Bugs with GitHub Copilot thumbnail

Spot, Squash, Secure: Fighting Security Bugs with GitHub Copilot

Malte Lantin +1

World Congress Europe · 2026

What The Hack is Web App Sec? thumbnail

What The Hack is Web App Sec?

Jackie

Coffee With Developers · Jun 2025

Simple Steps to Kill DevSec without Giving Up on Security thumbnail

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans · Semgrep

World Congress · 2025

Related articles

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

CH

Chris Heilmann

Dev Digest 134 - Where pixels sing?

News and ArticlesWeAreDevelopers LIVE Data and Security Day is on Wednesday, 25/09/2024. Learn about OPC UA Updates, Best Practices for Using GitHub Secrets, Passwordless Web 1.5, Emerging AI Secur...

about 2 years ago

Dev Digest 134 - Where pixels sing?

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Cyber Defense Specialist

Raiffeisen Bank International AG

€47k Mitre Att&ck Cyber Warfare Cyber Security

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Bank Platform Transformation - Test Execution Leader - Sr Associate

San Francisco, CA, United States

Expert $77k–202k Test Case Software Quality Agile Methodology

Senior Web Software Architect, AI Experiences

TeamViewer Germany GmbH

Austin, TX, United States

Expert ReactJS TypeScript TeamViewer