b48f56c1__Application_Firewalls___OWASP__Comment
[Criterion] Automated tests exist There are automated tests for quality assurance of the application representing a high degree of test coverage and they are used with new releases. [Points] 1 [Comment] 
Tests tend to check whether the required functionality is available. Security in this context does mean that the undesirable functionality is not present -> this does not normally accomplish much.
Category:OWASP Best Practices: Use of Web Application Firewalls - OWASP