The safeguards map / 2.1 Tester-run
OWASP Penetration Testing Kit (PTK)
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A browser extension for testing web applications from the live browser session, with an automation agent and a GitHub Action for CI runs.
Where it sits
2.1 Tester-run (primary): Tests a web application from the live browser session with DAST, client-side static analysis, in-browser IAST, component analysis, request replay and JWT testing.
PTK combines DAST, client-side SAST, in-browser IAST, SCA, traffic inspection, request replay, and JWT testing.
captured
OWASP PTK is the interactive extension for tester-driven security testing.
captured
2.2 CI-integrated: Runs the same tests unattended through an automation agent and a GitHub Action, and publishes supported findings to code scanning.
Use the published PTK Action to run the same agent lifecycle in CI, retain scan artifacts and publish supported findings to code scanning.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make itthose who run it
- Runs
- by handin CI
- Tests
- the application or API
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Collector's note
The interactive extension leads, so tester-run is primary; the CI agent and GitHub Action are documented separately.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.