What it does
- Reads Checkmarx SAST reports and surfaces the “to verify” findings by severity.
- Watches WebInspect DAST runs, flags the ones that fail, and re-syncs results when something drifts.
- Sends Slack alerts that link straight back to whatever scan triggered them.
- Runs everything in parallel, so one slow project doesn’t hold up the rest.
Why it matters
Scan tooling is only useful if someone notices when something breaks. Without something poking me, the obvious problems were hiding at the bottom of a long list. AppSec Monitor closes that gap without flooding the channel.