We’ve launched a new LinkedIn page for OWASP Belfast. The goal is to make the chapter more active, visible and useful for the local AppSec community, with regular events, practical sessions and OWASP project demos. Follow us: linkedin.com/company/owasp-b… #OWASP #AppSec #Belfast

My OWASP PTK YouTube channel is 6 years old and has 599 subscribers - just one away from 600. If the browser-security demos have been useful, perhaps you can be subscriber #600. 🙂 youtube.com/channel/UCbEcTou… #OWASP #AppSec

Watch the full video from @bsidesbelfast 2026 OWASP PTK: Security Testing Where the Browser Is the Source of Truth youtube.com/watch?v=34w1vcS3…

A major milestone: OWASP PTK has been approved for OWASP Production level. 🎉 From a browser extension to DAST, SAST, IAST, SCA, automation, GitHub Actions and ZAP integration. Thanks to everyone who tested, contributed and supported PTK. owasp.org/projects/penetrati…

Browser automation already has the real application session: authentication, SPA state, loaded JavaScript and API traffic. PTK Auto runs DAST, SAST, IAST and SCA inside that session while the existing test remains in control. Cloud-provider support: github.com/ptklabs/ptk-agent…

OWASP PTK 9.9.9 is out. New: macro-guided scans. Import or record a browser journey, replay it deterministically, and collect DAST, IAST, SAST & SCA evidence across the flow. Plus better SPA/tab coverage and security hardening. pentestkit.co.uk/release_not…

We’ve released OWASP PTK Security Scan on GitHub Marketplace. Run DAST, IAST, SAST and SCA in Chromium, upload SARIF to GitHub Code Scanning, and fail CI by severity. Browser-side security testing on every PR. github.com/marketplace/actio…

We’ve released PTK Auto for OWASP PTK automation. Run browser-side security testing from CLI, CI/CD, Playwright, Puppeteer, Selenium and Cypress workflows. Browser testing + security testing in the same automation flow. See pentestkit.co.uk/install.htm… #OWASP #AppSec #DevSecOps

I'm speaking at @bsidesbelfast! 𝗢𝗪𝗔𝗦𝗣 𝗣𝗧𝗞: 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗧𝗲𝘀𝘁𝗶𝗻𝗴 𝗪𝗵𝗲𝗿𝗲 𝘁𝗵𝗲 𝗕𝗿𝗼𝘄𝘀𝗲𝗿 𝗜𝘀 𝘁𝗵𝗲 𝗦𝗼𝘂𝗿𝗰𝗲 𝗼𝗳 𝗧𝗿𝘂𝘁𝗵

@browserbase vs @browserless? Both platforms are strong, and both can add OWASP PTK as a security layer. See screenshots for some early experiments.

Making 𝗢𝗪𝗔𝗦𝗣 𝗣𝗧𝗞 easier to integrate with browser automation platforms like @browserstack . If you already run browser tests with 𝗦𝗲𝗹𝗲𝗻𝗶𝘂𝗺, 𝗣𝗹𝗮𝘆𝘄𝗿𝗶𝗴𝗵𝘁, 𝗣𝘂𝗽𝗽𝗲𝘁𝗲𝗲𝗿, or 𝗖𝘆𝗽𝗿𝗲𝘀𝘀, why not add a security testing layer into the same workflow?

Great for anyone interested in browser-side security testing, SAST, and modern web application security. youtu.be/uUUAm4U9tA8

If you use @browserling for cross-browser testing, you can also add a lightweight security testing layer with OWASP PTK. Watch the demo.

ZAP and PTK - Phase 2. zaproxy.org/blog/2026-06-05-…

𝗢𝗪𝗔𝗦𝗣 𝗣𝗧𝗞 𝗶𝘀 𝗻𝗼𝘄 𝗮𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲 𝗮𝘀 𝗮𝗻 𝗻𝗽𝗺 𝗽𝗮𝗰𝗸𝗮𝗴𝗲 Instead of treating browser security testing as a separate manual activity, teams can now run PTK-backed scans as part of automation. npmjs.com/package/pentestkit