Targeted security testing

A computer program product comprising a computer readable medium having a plurality of instructions stored thereon, which, when executed by a processor, cause the processor to perform operations including:

• statically analyzing source code of a plurality of web pages including script code;
• identifying a web page including a potential vulnerability based on the static analysis;
• identifying a web page not including a potential vulnerability based on the static analysis;
• dynamically analyzing the web page including the potential vulnerability using a set of test payloads;
• and
• dynamically analyzing the web page not including the potential vulnerability using a subset of the set of test payloads, the subset including fewer test payloads than the set of test payloads.

A system comprising:

• a processor and a memory coupled with the processor;
• a first software module deployed in the memory and executed on the processor, the first software module configured to statically analyze source code of a plurality of web pages including script code;
• a second software module deployed in the memory and executed on the processor, the second software module configured to identify a web page including a potential vulnerability based on the static analysis;
• a third software module deployed in the memory and executed on the processor, the third software module configured to identify a web page not including a potential vulnerability based on the static analysis;
• a fourth software module deployed in the memory and executed on the processor, the fourth software module configured to dynamically analyze the web page including the potential vulnerability using a set of test payloads;
• and
• a fifth software module deployed in the memory and executed on the processor, the fifth software module configured to dynamically analyze the web page not including the potential vulnerability using a subset of the set of test payloads, the subset including fewer test payloads than the set of test payloads.