Building a High-Value AppSec Scanning Programme

Understanding how to get better value from SAST, DAST and SCA tools.

Elevator pitch for the course (~2 minutes)

Back to top ↑

In this short video, I give a quick explanation of the course and the ideas around it.

Quick overview of the background to the course (~10 mins)

Back to top ↑

In this editorial interview with Dark Reading which I did at Black Hat USA 2023, I talk about the background to the course and we also dig into my general philosophy when it comes to effective application security.

Discussion of the background to the course (~40 minutes)

Back to top ↑

In this interview with the Application Security Podcast, I talk through the background to the course including where the idea came from and the key takeaways and ideas I want people to get from the course.

SCA Deep Dive - Sample 1 of the course material (~55 minutes)

Back to top ↑

This is an example of some of the course content albeit pushed together in a less interactive way. The course itself has more discussion and exercises interspersed. This particular session was a deep-dive on Software Composition Analysis (SCA).

Quick-fire tips - Sample 2 of the course material (~40 minutes)

Back to top ↑

This was a talk I did at DevSecCon24 which was designed to be a few quick examples of efficiency tips for SCA and SAST. In the full training course there are far more suggestions and there is much more time to explain, discuss and practice them.

Let's speak about this!

Back to Our Training