🔐Security Test

This page describes about the Security Test Module in TestWheel application.

The Security Test module in TestWheel enables users to perform security testing for Web Applications and REST APIs. This module helps identify security vulnerabilities, detect potential threats, and improve application security by validating application behavior against common security risks.

Security testing is an important process that helps protect sensitive data, enforce secure access controls, and maintain reliable application functionality. By identifying vulnerabilities early, organizations can improve security compliance and reduce security-related risks

Accessing the Security Test Module

To start security testing, navigate to the Dashboard and select the Security Test icon from the side navigation menu. Clicking the icon redirects users to the Security Test page.

Select Application

Before creating a security scan in TestWheel, users must select an application from the Application Dropdown. The selected application can be either a Web Application or a REST API Application, depending on the type of security testing required. Selecting the appropriate application allows users to configure and execute security scans for the target application environment effectively.

Adding Scan Data

After selecting an application, users can create a new scan configuration by clicking the Add Scan Data button. The Add Scan Data page allows users to configure the required scan details for the security test.

Target URL Configuration

Users must provide the Target URL, which represents the base URL of the application that will be scanned during the security testing process.

Important: Ensure that the Target URL is valid and accessible before starting the scan.

After entering the required details, click Save to store the scan configuration successfully.

Managing Scan Configuration

After the scan configuration is saved, the TestWheel Security Test dashboard displays the configured scan entry along with its details. From this page, users can manage the saved security scan configuration efficiently.

Users can perform the following actions:

• Edit Scan Data to modify the existing scan configuration

• Start Scan to initiate the security testing process

Authenticated Scan

If the application requires user authentication, users must enable the Authenticated Scan option in TestWheel. Once the option is enabled, users are required to provide the Login URL, Username, and Password to allow the security scan to access authenticated areas of the application.

After entering the required authentication details, click the Save button to securely store the scan configuration.

Important: The provided login credentials must be valid; otherwise, the authenticated security scan may fail.

Start Security Scan

Once the scan configuration is completed, users can click the Start Scan button to initiate the security testing process in TestWheel. During execution, the platform scans the selected application for potential security vulnerabilities based on the configured scan settings and authentication details. After the scan is completed, TestWheel generates security testing results that help users analyze vulnerabilities, review security findings, and improve overall application security.

Security Test Results

After the security scan is completed, users can review the generated Security Test Results directly from the TestWheel platform. The Test Result page displays detected vulnerabilities, scan findings, and security-related information identified during the testing process. These results help users analyze application security issues, track vulnerabilities efficiently, and improve the overall security of Web Applications and REST APIs.

Users can click the Report icon available in the Test Summary section to view and download the detailed Security Test Report for the completed scan.