Automated Web Application Security Reporting System with Slack Integration

Ensuring web application security is no longer an option but a basic need in today's connected world. The disturbing rate of cyber threats has made the assurance of secure web applications crucial today. It is important to find vulnerabilities in the initial development stage of the web application. Therefore, this work proposes a new approach that integrates vulnerability scanning natively within Slack, a messaging platform for application development team collaboration, that makes security procedures easier to carry out by the developers. By making use of a Slack slash command, a developer can upload a Uniform Resource Locator (URL) of a web application with the request to have a scan of vulnerabilities, such as Structured Query Language (SQL) Injection, Cross-Site Scripting, Session Hijacking, Sensitive Data Leakage, Broken Authentication, Command Injection, Cross-Origin Resource Sharing (CORS) misconfiguration, Cache Poisoning, Clickjacking, Cross-Site Request Forgery, Insecure Direct Object References (IDOR), Insecure APIs, Lightweight Directory Access Protocol (LDAP) Injection, Path Traversal and Subdomain Takeover. The proposed approach uses the Google Gemini API to generate precise reports on each vulnerability based on potential risks as well as suggested mitigation strategies, enabling them to rapidly determine and conquer security flaws. The solution equips developers with the ability to proactively secure applications using a defense-first approach in modern development practice. The proposed approach contributes to ever changing field of automated security solutions in a user-prioritized manner.