Security Testing Library
TestGuild’s collected security testing content, covering shift-left AppSec practices across articles, webinars, podcasts, and conference talks.
New to Security Testing? Start with our guide →Articles (9)
article
Testers are You Ready for Adversarial AI?
Oct 27, 2020 article
How to Level-Up Your Testing Skills with Security
Oct 5, 2020 article
9 Top Automation Testing Trends for 2020
Jan 21, 2020 article
Why is Shift-Left Security Testing Important?
Dec 26, 2019 article
Top Free Security Testing Tools
May 14, 2019 article
Metasploit Penetration Testing: What You Need to Know
Sep 22, 2016Webinars (1)
Podcasts (122)
podcast
Playwright MCP Cost, OWASP’s Warning, and the Question Nobody’s Asking TGNS192
Aug 10, 2026 podcast
How to Test Any API Without Documentation with Liudas Jankauskas
Jun 30, 2026 podcast
Developer-First DAST: Fix Security Issues Before They Reach Production with Gadi Bashvitz
Jan 22, 2026 podcast
Vibium, Autonomous Testing, and the CORS Model for AI Agent Security TGNS178
Jan 12, 2026 podcast
Testing AI Vibe Coding: Stop Vulnerabilities Early with Sarit Tager
Nov 16, 2025 podcast
Why AI + DevSecOps Is the Future of Software Security With Patrick J. Quilter Jr
Aug 27, 2025Show all 122 podcasts
- AI, IoT, and the Future of DevSecOps with Hariharan Ragothaman
- When the Cloud Isn’t an Option: Securing Your API Testing Strategy with Thomas Hurley
- How to Grow your Career in Cybersecurity with Grant McCracken
- Accelerate QA Using AI, Appium MCP, Security Testing and More TGNS155
- The API Vector with Jeremy Snyder
- Autonomous Ethical Hacking, New Playwright, Robot Framework Certification TGNS150
- AI and the New Era of Cybersecurity Threats with Mateo Rojas-Carulla
- Digitial Testing, Al-Driven Mobile Attacks, Accessibility Plugins and More TGNS141
- Why Security Testing is an important skill for a QEs with Boris Arapovic
- Leveraging AI for Secure DevOps with Peter McKee
- AI-Driven DevOps Data Security and Privacy with Amjad Afanah
- Effortless Code Quality And Security For Developers with Jaime Jorge
- Copilot for Testers, GPT-4 Security Testing and More TGNS117
- AI-Powered Security Orchestration in DevOps with Brittany Greenfield
- DevOps Cybersecurity 101 with Jason Mar-Tang
- Playwright Workshop, Who’s Responsible for Security, BDD and More TGNS112
- AutomationGuild 2024, Swagger API Security and Gemini AI TGNS105
- How to Build DevSecOps Pipeline as Code with Hasan Yasar
- Secure Automation Testing at Scale Leveraging SBOX with Michael Palotas and Lee Walsh
- Bootstrapping a Security Process for Software Teams with Evan Niedojadlo
- AI Assistance Test Tooling, Burp Suite GPT, Oracle Performance Testing and More TGNS86
- Web3 Test Automation with Joshua Gorospe
- 100 Billion Dollar Bug, Postman Collections and More! TGNS73
- How ChatGPT Impacts Automation, Performance, and Security Testing TGNS69
- Continuous Accessibility-Security Testing, WebDriverIO 8 and More! TGNS68
- Security Test Methodology for Testers with Mike Spanbauer
- Bug Bounties, Accessibility, MLOPS, and More! TGNS58
- How to Measure to Improve Quality, Hacking Fun and More TGNS54
- AskUi, Automation Stack or Framework? TGNS50
- AI Automation CodeWhisperer TGNS48
- Rocking Automation, AI Synthetic Data and More TGNS46
- Security Testing Protections, Feature Flags and More TGNS44
- Selenium Speakers, Slack Load Testing TGNS42
- Kubernetes Goat, Mabl, Cypress and More TNGS41
- Cypress VS Playwright and More TGNS40
- ML for Testers Course, Python Performance Tool and more
- Open-source Salesforce Testing & Cloud Tools TGNS36
- AI Test Data and Vulnerabilities TGNS35
- Books for Testers and Zen TGNS34
- SelectorHub, Resilience Testing and more TGNS30
- IE11 Automation Testing is Dead? TGNS29
- Appium Inspector, Test Tool Vulnerabilities & More TGNS28
- Fortnite Down! Metaverse and Selenium AI testing: TGN27
- Rise of Continuous Non-Functional Testing with Rick Broker
- Gift for Testers, AWS Down Again: TGNS26
- Log4j Security Alert, Angie Jones Leaving Test TGNS25
- Testing Super Mario, Tesla TGNS23
- Google Fuzz Testing TGNS22
- AI, Test Dashboards and Threat Modeling TGNS21
- How Does Pokemon GO Automate? TGNS20
- How does Facebook Scale Automation TGNS19
- Testing Red Flags TGNS18
- Hackable with Ted Harrington
- Selenium 4 Facebook & Twitch Hack TGNS17
- BlazeMeter Acquired, Testing Vs Checking TGNS16
- Headless Automation Not Worth it? TGNS15
- Is the Page Object Model Overrated? TGNS14
- AI Unit Testing, Kubernetes TGNS11
- API Pen Testing with Mateusz Olejarka
- How to achieve the Defense Department’s CMMC compliance with Frank Smith
- The Benefits of Automating Your API Security Testing with Oliver Moradov
- Developing a Security Test Methodology with Mike Spanbauer
- Prioritize Your Open Source Findings with James Rabon
- CyberOps with Joe Abraham
- TrustedSec Sysmon Community Guide with Carlos Perez
- Cybersecurity Tools and Frameworks with Aaron Rosenmund
- Information Gathering in Penetration Testing with Malek Mohammad
- AWS Penetration Testing with Jon Helmus
- Discover Network Vulnerabilities using Infection Monkey with Maril Vernon
- OWASP Broken Authentication Breakdown with Prasad Salvi
- API Security Testing In DevOps with Oli Moradov
- Covid-19 Security and OWASP with Adiran Thirmal
- SQL Injection OWASP Top 10 with Prasad Salvi
- P2P Security with Paul Marrapese
- Avoid Being Runtime Blind using DeepFactor with Kiran Kamity & Mike Larkin
- When and How Security Testing Should be Done
- The Power of a Threat Aware Network with Mike Spanbauer
- Client Side Penetration Testing with Prasad Salvi
- Cyber Security Job Hunting with Owanate Bestman
- Automated Security Compliance with Eric Martin
- Securing the Future of RPA with Alan Radford
- DevSecOps Blind Spots with Wilson Mar
- Cyber Security Tips and Virus Bombs with Greg Scott
- Data Poisoning and Adversarial AI with Dr. Arash Rahnama
- The Art of Network Penetration Testing with Royce Davis
- Next Generation DevSecOps with Cindy Blake
- Talisman Security Testing with Harinee Muralinath
- Switching from QE to Product Security with Dwayne Thomas
- Cloud Security Myths with Vandana Verma
- Ethical Hacking: Understanding Ethical Hacking with Dale Meredith
- Challenges Implementing & Sustaining DevSecOps with Hasan Yasar
- Penetration Testing of Identity, Authentication & Authorization with Prasad Salvi
- Getting Started with AppSec with Tanya Janca
- Professional Red Teaming with Joe Vest
- Security and Certifications with Nancy Gariché
- Android Application Security Testing with Marko Belzetski
- How to Win over that Elusive Developer with Adhiran Thirmal
- Do your Pipelines Remember with James Rabon
- Browser Exploitation Framework (BeEF) with Gavin Johnson-Lynn
- Securing DevOps: Security in the Cloud with Julien Vehent
- HackEdu: Hands-On Security Training with Arthur Hicken & Jared Ablon
- Hacker Tools and Skills For Security Testers with Jahmel Harris
- Metasploit Pen Testing with Keith Watson
- Security in DevOps Like a Boss with Tanya Janca
- Understanding the Most Common Secure Coding Standards with Arthur Hicken
- Test Your WAF and Make it Your Friend with Franziska Buehler
- How to Security Test Your APIs with Troy Hunt
- Developers are Taking Over Application Security with Jeffrey Martin
- Shift-Left Security Testing with Kevin E. Greene
- Introduction to the TestGuild Security Testing Podcast
- 252: Security Testing in 2019 with SecureGuild
- 250: Pushing Security Testing Left, Like a Boss with Tanya Janca
- 120: Penetration Testing Using Metasploit with Keith Watson
- 64: Ross Bagurdes: Using WireShark to Attack Hard to Find Bugs
- 31: Eric Lawrence: Debugging with Fiddler
- 21: Troy Hunt: Hack Your API-Security Testing
Talks (32)
talk
Agentic AI in Security Testing: Building first Real‑world Autonomous QA Agents (Toni Ramchandani)
talk
Toni Ramchandani: Agentic AI in Security Testing: Building first Real‑world Autonomous QA Agents
talk
Boris Arapovic: Practical Cybersecurity Deep Dive for Quality Engineers
talk
Cracking The Code On API Security: Insights On OWASP API Top 10 (Arthur Hicken)
talk
Enhancing Your Existing Testing Process With Some Security (Evan Niedojadlo)
talk
Safeguarding Digital Assets: Uncovering Security Risks In APIs (Pricilla Bilavendran)
Show all 32 talks
- Arthur Hicken: How to Shift Security Testing left
- Cassie Crossley: Integrated Software Bill of Materials (SBoM) into DevSecOps
- Cindy Blake: Bringing Fuzz Testing to the Mainstream
- Dale Meredith: Creating Your Own Hacking Lab
- Dr. Arash Rahnama: Attacking AI with Adversarial Inputs and How to Defend against It!
- Harinee Muralinath: Vulnerable Dependencies - The Toxic Relation
- Harjit Sandhu: Learn how to threat model using an interactive board game
- Hasan Yasar: How to build DevSecOps Pipeline as Code!
- Jahmel Harris: Security in your pocket; Android application security for beginners
- James Rabon: Do You Know How to Prioritize Your Open Source Findings?
- Kiran Kamity & Mike Larkin: Using Pre-Production Observability in QA & DevSecOps
- Mike Spanbauer: Developing a Security Test Methodology
- Royce Davis: Teach Yourself Penetration Testing: A hands on walkthrough of the Capsulecorp-pentest environment
- Tanya Janca: Intro to AppSec
- Adhiran Thirmal: How to win over that elusive Developer
- Altaz Valani: Threat Modeling @ Scale
- Arthur Hicken: Understanding the Most Common Secure Coding Standards
- Dawid Bałut: Successful DevSecOps Evolution
- Dwayne Thomas: Switching from QE to Product Security
- Franziska Buehler: Test your WAF and make it your friend!
- Hasan Yasar: Challenges in Implementing and Sustaining DevSecOps Environment
- Jahmel Harris: Hacker Tools for Developers and Testers
- Jimmy Rabon: Do your Pipelines Remember?
- Morgan Roman: Integrated Security Testing
- Roundtable Ask Us Anything About Security
- Vandana Verma: Cloud Security and the Myths Around It