One of the topics I am currently working on is the testing of APIs on the security level, e.g. as integration in SOAPUI and OWASP in WSO2. The integration of SOAPUI and WSO2 is set up and also works. Unfortunately I haven't found a reasonable manual to help me with the point OWASP ZAP on REST API level.

OWASP currently offers only this information which does not help me. In the further references which I link here, this topic is not talked past but no corresponding solution is offered.

Do you have tips on Soap UI or REST API Penetration Test or SoapUI Security Checks, or articles or helpful information on how I could integrate them?


  1. OWASP Secure Coding Practices

  2. Oracle Secure Coding Guidelines for Java

  3. SANS Secure Coding Guidelines

  4. Static Code Analysis for Java using FindBugs Plugin and Identifying Security Bugs with FindSecurityBugs Plugin

  5. OWASP Dependency Check CLI – Analyzing Vulnerabilities in 3rd Party Libraries

  6. Checking vulnerabilities in 3rd party dependencies using OWASP Dependency-Check Plugin in Jenkins

  7. Dynamic Scanning with OWASP ZAP for Identifying Security Threats

  8. Automating the boring stuff in development using ZAP and Jenkins : Continuous Integration

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.