NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software
Section 2: Recommended minimum standard for developer testing – NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software

NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software 2.10: Run a web application scanner where the software is a web application

What does 2.10 require?

Where the product is or includes a web application, a dynamic web application scanner is run against it to find vulnerabilities that only appear in the running application, such as injection, cross-site scripting and misconfiguration. The scanner is run on the deployed configuration and findings are fixed.

Maintained by Gerard Blokdyk

Other controls in Section 2: Recommended minimum standard for developer testing – NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software controls