AppSec - Welcome to Stackinsight community. Join the discussion about products and tools for work Forum https://communities.stackinsight.net/community/cyber-appsec/ Welcome to Stackinsight community. Join the discussion about products and tools for work Discussion Board en-US Thu, 23 Jul 2026 02:15:27 +0000 wpForo 60 Our results after a 30-day pen test of a live OpenClaw deployment. Graphs inside. https://communities.stackinsight.net/community/cyber-appsec/our-results-after-a-30-day-pen-test-of-a-live-openclaw-deployment-graphs-inside/ Tue, 21 Jul 2026 21:20:42 +0000 AppSec datadog_dave https://communities.stackinsight.net/community/cyber-appsec/our-results-after-a-30-day-pen-test-of-a-live-openclaw-deployment-graphs-inside/ Anyone compared Black Duck and Apiiro for code risk analysis? https://communities.stackinsight.net/community/cyber-appsec/anyone-compared-black-duck-and-apiiro-for-code-risk-analysis/ Tue, 21 Jul 2026 20:29:08 +0000 AppSec islab https://communities.stackinsight.net/community/cyber-appsec/anyone-compared-black-duck-and-apiiro-for-code-risk-analysis/ Step-by-step walkthrough: Threat modeling a Claw-based marketing automation workflow. https://communities.stackinsight.net/community/cyber-appsec/step-by-step-walkthrough-threat-modeling-a-claw-based-marketing-automation-workflow/ Tue, 21 Jul 2026 17:56:46 +0000 AppSec devops_dad_v2 https://communities.stackinsight.net/community/cyber-appsec/step-by-step-walkthrough-threat-modeling-a-claw-based-marketing-automation-workflow/ AppSec implementation guide - how we rolled out SAST across 50 repos https://communities.stackinsight.net/community/cyber-appsec/appsec-implementation-guide-how-we-rolled-out-sast-across-50-repos/ Tue, 21 Jul 2026 15:38:40 +0000 AppSec Diego H. https://communities.stackinsight.net/community/cyber-appsec/appsec-implementation-guide-how-we-rolled-out-sast-across-50-repos/ Check out this open-source tool I wrote to audit Claw plugin permissions. https://communities.stackinsight.net/community/cyber-appsec/check-out-this-open-source-tool-i-wrote-to-audit-claw-plugin-permissions/ Tue, 21 Jul 2026 15:36:43 +0000 AppSec Isabella Torres https://communities.stackinsight.net/community/cyber-appsec/check-out-this-open-source-tool-i-wrote-to-audit-claw-plugin-permissions/ Breaking: Found a critical misconfig in OpenClaw's default Helm chart. Sharing a patch. https://communities.stackinsight.net/community/cyber-appsec/breaking-found-a-critical-misconfig-in-openclaws-default-helm-chart-sharing-a-patch/ Tue, 21 Jul 2026 10:07:44 +0000 AppSec Emma E. https://communities.stackinsight.net/community/cyber-appsec/breaking-found-a-critical-misconfig-in-openclaws-default-helm-chart-sharing-a-patch/ TIL how to bypass Claw's prompt injection guardrails with a simple formatting trick. https://communities.stackinsight.net/community/cyber-appsec/til-how-to-bypass-claws-prompt-injection-guardrails-with-a-simple-formatting-trick/ Tue, 21 Jul 2026 10:02:20 +0000 AppSec brian https://communities.stackinsight.net/community/cyber-appsec/til-how-to-bypass-claws-prompt-injection-guardrails-with-a-simple-formatting-trick/ Black Duck vs FOSSA - real world comparison on a multi-language project https://communities.stackinsight.net/community/cyber-appsec/black-duck-vs-fossa-real-world-comparison-on-a-multi-language-project/ Tue, 21 Jul 2026 07:58:20 +0000 AppSec ellaq https://communities.stackinsight.net/community/cyber-appsec/black-duck-vs-fossa-real-world-comparison-on-a-multi-language-project/ AppSec tool evaluation checklist: scanning, integration, false positives https://communities.stackinsight.net/community/cyber-appsec/appsec-tool-evaluation-checklist-scanning-integration-false-positives/ Tue, 21 Jul 2026 07:28:11 +0000 AppSec fionaj https://communities.stackinsight.net/community/cyber-appsec/appsec-tool-evaluation-checklist-scanning-integration-false-positives/ Apiiro alternatives that are not just another SAST tool https://communities.stackinsight.net/community/cyber-appsec/apiiro-alternatives-that-are-not-just-another-sast-tool/ Tue, 21 Jul 2026 01:17:55 +0000 AppSec bench_beast https://communities.stackinsight.net/community/cyber-appsec/apiiro-alternatives-that-are-not-just-another-sast-tool/