))
Episode #30 - How to build a sustainable AppSec program
Manage episode 363588578 series 3298179
Indhold leveret af ink8r. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af ink8r eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.
Apiiro has built its Code Risk Platform to address risks inherent in material changes to application logic/code ... long before those change ship to prod. Given the imbalance in the ratio of developer to security practitioner, Apiiro's solution is crucial if we are to deliver sustainable security programs that meet the demands of new product introduction. They are the winner of RSA's Innovation Sandbox and are recognized by Gartner as a Cool Vendor in DevSecOps.
Apiiro establishes an ongoing understanding of the ins and outs of applications and software supply chains, and how the attack surface changes over time. Their Risk Graph represents all code modules, dependencies, user stories, APIs, data models, development environments, container images, pipelines, technologies, frameworks, contributors, and other application components. Taking signal logic such as developer behaviors and various security inputs, they can trigger engagement models to allow developers and security practitioners to co-create software changes. This is a must-have for every security program!
Please listen and contact Satbir and Darren to explore this and other cybersecurity and risk-related domains.
44 episoder
Del
