Application Security Weekly (Audio)
Scanner Results Are a Starting Point. Here's What Comes Next. - Federico Kirschbaum - ASW #386
1:16:23
Most AppSec teams are working through more findings than their teams can validate. SAST surfaces thousands of potential issues. DAST generates alert volume that outpaces triage capacity. Somewhere in that output are the vulnerabilities that matter, the ones that are actually exploitable in production. This conversation explores why automated testing often stops short of the hardest part of the…