<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hey all,<div class=""><br class=""></div><div class="">I recently heard about <a href="https://detectify.com/" class="">https://detectify.com/</a> , which is a service which does automatic pen testing, scanning for OWASP top 10 vulnerabilities (<a href="https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project" class="">https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project</a>).</div><div class=""><br class=""></div><div class="">I thought this would be a useful thing to try to run against <a href="https://twistedmatrix.com" class="">https://twistedmatrix.com</a>. They offer non-commercial accounts, and have approved us for a non-commercial account should we want to run automated scans.</div><div class=""><br class=""></div><div class="">I’m going to try running the scan once tonight (post midnight PST), or alternately tomorrow (again post midnight PST) if tonight goes wrong.</div><div class=""><br class=""></div><div class="">Any vulnerabilities discovered will be shared with twisted admins only. </div><div class=""><br class=""></div><div class="">Just wanted to warn everyone in case alerts start going off or if it happens to knock anything over (which is unlikely, but just in case Glyph has volunteered to look into it if it happens).</div><div class=""><br class=""></div><div class="">Thanks!</div><div class="">-Ying</div></body></html>