AppSec - Welcome to Stackinsight community. Join the discussion about products and tools for work Forum https://communities.stackinsight.net/community/cyber-appsec/ Welcome to Stackinsight community. Join the discussion about products and tools for work Discussion Board en-US Wed, 30 Sep 2026 12:44:08 +0000 wpForo 60 Help: Our compliance audit failed because we can't prove who 'approved' an agent's code change. https://communities.stackinsight.net/community/cyber-appsec/help-our-compliance-audit-failed-because-we-cant-prove-who-approved-an-agents-code-change-2/ Mon, 28 Sep 2026 19:50:57 +0000 AppSec Charlie B. https://communities.stackinsight.net/community/cyber-appsec/help-our-compliance-audit-failed-because-we-cant-prove-who-approved-an-agents-code-change-2/ How to choose the best AppSec tool for your stack - a practical guide https://communities.stackinsight.net/community/cyber-appsec/how-to-choose-the-best-appsec-tool-for-your-stack-a-practical-guide-2/ Sun, 27 Sep 2026 00:10:56 +0000 AppSec gareth_h https://communities.stackinsight.net/community/cyber-appsec/how-to-choose-the-best-appsec-tool-for-your-stack-a-practical-guide-2/ Anyone moved from Apiiro to another ASPM tool? Real experiences? https://communities.stackinsight.net/community/cyber-appsec/anyone-moved-from-apiiro-to-another-aspm-tool-real-experiences/ Sat, 26 Sep 2026 23:56:14 +0000 AppSec Hiroshi Matsumoto https://communities.stackinsight.net/community/cyber-appsec/anyone-moved-from-apiiro-to-another-aspm-tool-real-experiences/ Has anyone successfully gotten Claw's vendor to share their internal penetration test reports? https://communities.stackinsight.net/community/cyber-appsec/has-anyone-successfully-gotten-claws-vendor-to-share-their-internal-penetration-test-reports/ Sat, 26 Sep 2026 20:56:04 +0000 AppSec jheller https://communities.stackinsight.net/community/cyber-appsec/has-anyone-successfully-gotten-claws-vendor-to-share-their-internal-penetration-test-reports/ Our team's findings: OpenClaw's default config leaks PII to its telemetry. Disable list here. https://communities.stackinsight.net/community/cyber-appsec/our-teams-findings-openclaws-default-config-leaks-pii-to-its-telemetry-disable-list-here-2/ Sat, 26 Sep 2026 13:10:45 +0000 AppSec danw https://communities.stackinsight.net/community/cyber-appsec/our-teams-findings-openclaws-default-config-leaks-pii-to-its-telemetry-disable-list-here-2/ Check out this graph of API call volume before/after we locked down an over-permissive agent. https://communities.stackinsight.net/community/cyber-appsec/check-out-this-graph-of-api-call-volume-before-after-we-locked-down-an-over-permissive-agent/ Fri, 25 Sep 2026 04:35:43 +0000 AppSec BluePine https://communities.stackinsight.net/community/cyber-appsec/check-out-this-graph-of-api-call-volume-before-after-we-locked-down-an-over-permissive-agent/ GitHub secret scanning vs GitGuardian for a GitHub-heavy org https://communities.stackinsight.net/community/cyber-appsec/github-secret-scanning-vs-gitguardian-for-a-github-heavy-org-2/ Fri, 25 Sep 2026 01:26:01 +0000 AppSec devops_rookie_2025 https://communities.stackinsight.net/community/cyber-appsec/github-secret-scanning-vs-gitguardian-for-a-github-heavy-org-2/ Whitebox vs other appsec tools: a feature-by-feature comparison https://communities.stackinsight.net/community/cyber-appsec/whitebox-vs-other-appsec-tools-a-feature-by-feature-comparison-2/ Sun, 23 Aug 2026 14:11:01 +0000 AppSec emma88 https://communities.stackinsight.net/community/cyber-appsec/whitebox-vs-other-appsec-tools-a-feature-by-feature-comparison-2/ Is Apiiro worth the premium for application security? https://communities.stackinsight.net/community/cyber-appsec/is-apiiro-worth-the-premium-for-application-security/ Sat, 22 Aug 2026 11:51:23 +0000 AppSec cost_analyst_ray https://communities.stackinsight.net/community/cyber-appsec/is-apiiro-worth-the-premium-for-application-security/ Practical question: Who 'owns' the security of an AI-generated script - the dev or the platform? https://communities.stackinsight.net/community/cyber-appsec/practical-question-who-owns-the-security-of-an-ai-generated-script-the-dev-or-the-platform-2/ Fri, 21 Aug 2026 13:26:09 +0000 AppSec georgek https://communities.stackinsight.net/community/cyber-appsec/practical-question-who-owns-the-security-of-an-ai-generated-script-the-dev-or-the-platform-2/