A typical automated security testing framework may include the following key components:
| Key components | Usage scenarios |
| Security testing tools | Security testing tools are in charge of testing for specific security vulnerabilities, such as cross-site scripting (XSS) and SQL injection, and also analyze HTTP responses for security issues |
| Target web service | In our example, we will use NodeGoat and WebGoat for the target testing website |
| Testing results analysis | Security testing tools may provide initial testing reports. Testing results can be further integrated by either a testing framework, such as Robot Framework, or a testing management tool, such as ArcherySec or OWASP DefectDojo |
| Robot Framework | This is a popular automation testing framework that we can use to integrate an automation process |
| Automation scripts | These scripts can... |