Steve Springett

Plugin execution needs to be isolated from other plugins and from the programs classloader. Additionally the plugins need to be componentized within the build and the result being one jar...

Some providers may produce multiple artifacts that may be useful for various purposes. AppSpider has the xml report that's useful for ThreadFix but the zips containing the scan logs and...

Job results should be able to be published via SFTP/SCP to a remote server.

Add BurpSuite Provider

1

Add a provider implementation for BurpSuite

Add a provider implementation for HPE WebInspect 16.20 and higher using it's REST API / swagger definitions.

Add the ability to send email alerts whenever the state of a job changes.

Add a provider implementation for nmap

Add a provider implementation for Metasploit via its REST API.

Add a provider implementation for Peach Fuzzer using it's REST API / swagger definitions.

Add support for Blueprints

6

A BOM is not overly useful to defenders as they only contain inventory of things and potentially how something was built (e.g. formulation). They do not provide any insight into...