OWASP Penetration Testing Kit - SCA

Generate report

Scanning

Scan in runtime

Stop runtime scan

Loading

Packages

0

Findings

0

Critical

0

High

0

Medium

0

Low

0

Info

0

SCA, or Software Composition Analysis, is an application security methodology that helps identify and manage risks associated with open-source software components used in a project. By scanning JavaScript dependencies, OWASP PTK will identify security risks associated with open-source and third-party components.

How to scan an application:

Click the "Scan in runtime" button and confirm it's starting
Start browsing the application you are scanning, e.g. click on different links, submit forms, etc.
Once completed open SCA scanner and stop the scan
Check the result

Close

Scans:

Error

Check you API key. Open Settings -> PTK+ and make sure you have provided a valid key

Select project

Domain	Scan ID	Scan date	Download

Select project

Portal project

Cancel

Save scan

Confirm scan execution

Are you sure you want to run SCA scan against ?

Reload this tab to enable runtime scans (IAST/SAST). SCA can still run.

Cancel

Run scan

Import/Export

Export

Export

Preparing export...

Or

Import from text

Import from file