Shadow IT Security and why visibility beats another approval process
A staging site is meant to last a week, but six months later, it still resolves on a company subdomain, runs an old framework, and …
Industry Insights
Insights on all things web security, alongside trends and perspectives from Detectify security experts and friends.
Understanding the OWASP Top 10 2025 for Modern Application Security
In the world of application security, vulnerabilities are always a moving target. As modern applications keep becoming increasingly API-driven, cloud-native, and dependent on third-party services, …
The 29-minute Breakout: Why monthly vulnerability scanning no longer works
TLDR: We attended Cyber Security 2026: Kritisk infrastruktur in Stockholm, and the reality check was simple: “breakout time” has hit a record low of 29 …
Product comparison: Detectify vs. Acunetix
Detectify vs Acunetix is a common comparison for AppSec teams evaluating Dynamic Application Security Testing (DAST) tools. This article provides a direct comparison between Detectify …
Why traditional black box testing is failing modern AppSec teams
Applications have long evolved from monolithic structures to complex, cloud-native architectures. This means that the tried-and-true methods we rely on are becoming dangerously outdated. For …
The researcher’s desk: FortiWeb Authentication Bypass (CVE-2025-64446)
Welcome to The researcher’s desk – a content series where the Detectify security research team conducts a technical autopsy on vulnerabilities that are particularly interesting, …
The researcher’s desk: CVE-2025-59287
Welcome to The researcher’s desk – a content series where the Detectify security research team conducts a technical autopsy on vulnerabilities that are particularly interesting, …
Product comparison: Detectify vs. Halo Security
This review provides a direct comparison between two external security platforms, Halo Security and Detectify. The analysis will focus on three core areas critical to …