Articles


Ostorlab
Fix it! at Ostorlab
Sun 19 February 2023

Ostorlab's Fix it! practice is one of our most successful engineering practices helping us eradicate bugs and kill technical debt.

Ostorlab
Where are all these 3rd party SDKs sending my users' data? 😨
Thu 02 February 2023

Ostorlab’s new features are laser-focused on helping teams understand, track and search their attack surface, what attackers are seeing and targetting, and basically what can get an organization hacked.

Ostorlab
Ostorlab, top 10 vulnerability management innovators of 2023 by GRC Viewpoint
Mon 16 January 2023

Ostorlab has been selected as one of the top 10 vulnerability management innovators of 2023 by GRC Viewpoint.

Ostorlab
2022 at Ostorlab
Tue 03 January 2023

2022 is a year that brings with it many global challenges, including war, economic uncertainty, and rising inflation in many parts of the world. Despite these challenges, we at Ostorlab are grateful to have had an incredibly successful year.

Mobile Applications
Build you CI/CD pipeline for Mobile Applications with Jenkins, Github Actions and Azure Devops
Thu 27 October 2022

This article will cover the main challenges when implementing a CI/CD pipeline for mobile applications. We will also provide examples of how you can implement a CI/CD pipeline for Android and iOS applications in the most used Mobile CI/CD tools.

Mobile Applications
Text4Shell (CVE-2022-42889) in Mobile Applications ... should I worry?
Mon 24 October 2022

CVE-2022-42889 is a vulnerability in the Apache Commons Text Library caused by string interpolation abusing powerful handlers and present in popular application like Amazon Shopping, Udemy and Grammarly. This article goes over the applicability and risk of this vulnerability for Mobile Applications.

Ostorlab
New Dashboard, Better Insights
Thu 20 October 2022

As a reflection of the many new capabilities and changes we have made, we have released a new dashboard providing better insights into an organization's security posture.

Ostorlab
OWASP Mobile Application Verification Standard Support
Tue 04 October 2022

The Mobile Application Security Verification Standard is an important step toward building secure Mobile Applications. Ostorlab now adds support for generating compliance report for L1, L2 and Resilience levels.

Open-source
Tips and tricks for developing & debugging Ostorlab Agents.
Thu 18 August 2022

Tips and tricks to make your life easier when developing & debugging Ostorlab Agents.

Ostorlab
Improved Attack Surface Discovery, Mobile and Web Security Scanning
Thu 18 August 2022

Largest release with improvements to Attack Surface, Open-Source, Mobile and Web scanning and much much more.