An implementation of infrastructure-as-code scanning using dynamic tooling.

DevSecOps boilerplate that syncs the AWS Infrastrcuture, performs comprehensive SAST and DAST checks of the application, and entails advanced out-of-the-box Cloud Native Monitoring and Security solutions, as well as, implementing Kubernetes Policies as Code.

The infrastructure for the benchmark includes a set of Vulnerable by Design (VbD) Targets of Evaluation (ToEs) used to measure the speed and accuracy of automated Application Security Testing (AST) tools.