Request a Demo

Blogs

Thoughts, perspectives, and industry commentary from the Cobalt team.

3 Tips for Preparing for a Pentest

October 24, 2017
Est Read Time: 2 min
I’m the Chief Operations Officer at Cobalt, a Pen Testing as a Service company that has performed over 5800 pentests...
Read more
Thought Leadership
Spear Phishing with Go Phish Framework

Spear Phishing with Go Phish Framework

October 17, 2017
Est Read Time: 5 min
What is Spear Phishing?
Read more
Cobalt Core

7 Steps to Building a Yearly Pentest Plan

October 17, 2017
Est Read Time: 4 min
Pentesting is a great way to check your security posture and is an essential part of an application security program....
Read more
Thought Leadership

Bypassing CSRF tokens with Python’s CGIHTTPServer to exploit SQL injections

October 11, 2017
Est Read Time: 4 min
There are ways to configure Burp using macros to bypass CSRF tokens on HTML forms, so we can use Burp Active Scans,...
Read more
Thought Leadership

How to Survive a Vendor Security Questionnaire

August 14, 2017
Est Read Time: 7 min
Tips on vendor assessments from experts in the industry
Read more
Thought Leadership

New Alternatives to Bug Bounty Programs

August 2, 2017
Est Read Time: 4 min
Before you can choose the right approach to test your application security, you first need to understand your options —...
Read more
Thought Leadership

UX-Friendly Enumeration Protection in Ruby on Rails

May 23, 2017
Est Read Time: 4 min
How to avoid revealing the existence of records to attackers in web applications, while keeping a good user experience...
Read more
Cobalt Core

Penetration Testing for SaaS Companies

May 8, 2017
Est Read Time: 3 min
SaaS companies have fundamentally transformed the enterprise software model and at this point it seems there is no...
Read more
Thought Leadership

Start at Zero with the OWASP Top 10

April 24, 2017
Est Read Time: 3 min
Engineering is an exercise in working within constraints. Appsec increases those constraints, forcing developers to...
Read more
Thought Leadership
    72 73 74 75 76
    RSS

    Always get the latest

    Sign up to get Cobalt insights delivered right to your inbox so you never miss a story.

    More resources

    Learn pentesting best practices, read answers to our most common questions
    and get our technical docs.