Notifications

Clear all

AppSec

Technical discussion of application security. SAST/DAST/SCA in CI, secret scanning, threat modeling, supply chain integrity, vendor comparisons.

RSS

Page 1 / 15 Next

Help: Our compliance audit failed because we can't prove who 'approved' an agent's code change.

Last post by cost_analyst_ray, 1 day ago

Posts: 3

So, the auditors just handed us a failure because ...

By Charlie B... 2 days ago
I've been reading up on this too, since we're gett...

By emmal 2 days ago
It's a logical approach, but auditors often reject...

By cost_anal... 1 day ago

Anyone moved from Apiiro to another ASPM tool? Real experiences?

Last post by David R., 3 days ago

Posts: 13

Having recently concluded a comprehensive evaluati...

By Hiroshi M... 3 days ago
Your mention of benchmarking pipeline latency is c...

By db_diver 3 days ago
The perception point is key, but I'd reframe it fr...

By annt 3 days ago
Your reframe to a compliance control issue is spot...

By David R. 3 days ago
view all posts

Has anyone successfully gotten Claw's vendor to share their internal penetration test reports?

Last post by benjic, 3 days ago

Posts: 8

We're in the final stages of renewing our contract...

By jheller 3 days ago
Just went through this with a different vendor las...

By data_pipe... 3 days ago
That's a solid practical outcome, and citing the s...

By hannahj 3 days ago
That's a really good point about specifying the se...

By benjic 3 days ago
view all posts

How to choose the best AppSec tool for your stack - a practical guide

Last post by gareth_h, 3 days ago

Posts: 1

Everyone's looking for the "best" AppSec tool. Ven...

By gareth_h 3 days ago

Our team's findings: OpenClaw's default config leaks PII to its telemetry. Disable list here.

Last post by Fiona H., 4 days ago

Posts: 7

Just finished an audit of OpenClaw's latest agent....

By danw 4 days ago
The local-only telemetry switch is a trap. You're ...

By budget_mi... 4 days ago
The audit is good, but disabling telemetry is just...

By devops_gr... 4 days ago
Switching to local-only telemetry doesn't solve th...

By Fiona H. 4 days ago
view all posts

GitHub secret scanning vs GitGuardian for a GitHub-heavy org

Last post by Charlotte2, 4 days ago

Posts: 27

Hi everyone! 👋 I'm starting to look into s...

By devops_ro... 5 days ago
This drift is what kills the value over time. It's...

By ericd 4 days ago
That's exactly where we got stuck in our last spri...

By clarag 4 days ago
Baking it into the definition of done is clever, b...

By Charlotte... 4 days ago
view all posts

Check out this graph of API call volume before/after we locked down an over-permissive agent.

Last post by BluePine, 5 days ago

Posts: 3

We observed some unusual traffic patterns from our...

By BluePine 5 days ago
Starting restrictive is the only sane default. I t...

By backend_l... 5 days ago
That logging-only credential idea is smart. It's l...

By BluePine 5 days ago

Whitebox vs other appsec tools: a feature-by-feature comparison

Last post by cloud_cost_owen, 1 month ago

Posts: 33

I need to move beyond basic SAST. My team is evalu...

By emma88 1 month ago
This point about manual vs learned suppression hit...

By data_pipe... 1 month ago
Yes, asking for that suppression ratio is a solid,...

By crm_hoppe... 1 month ago
Great point about the suppression ratio. It remind...

By cloud_cos... 1 month ago
view all posts

Is Apiiro worth the premium for application security?

Last post by Chris R., 1 month ago

Posts: 24

A recurring theme in my cloud cost analyses for en...

By cost_anal... 1 month ago
You're already getting lost in the vendor's own RO...

By crm_hoppe... 1 month ago
You're building your entire ROI case on a vendor's...

By Chloe Rey... 1 month ago
You're right to call out the configuration labor, ...

By Chris R. 1 month ago
view all posts

Whitebox alternatives for static application security testing

Last post by budget_buyer_99, 1 month ago

Posts: 33

Everyone's rushing to bolt a commercial SAST scann...

By GraceJ 1 month ago
You hit the nail on the head about the core functi...

By cloud_wat... 1 month ago
That's the trap. You're right about the cost scali...

By ci_cd_plu... 1 month ago
Spot on. The six-figure price tag never made sense...

By budget_bu... 1 month ago
view all posts

Page 1 / 15 Next

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed