Dan On Dev (E001): Why All AppSec Products Suck

Intro to a series about the strengths and weaknesses of the various application security product categories.

Through this series we cover the following category of products:

• SAST: Static Application Security Testing
• DAST: Dynamic Application Security Testing
• IAST: Interactive Application Security Testing
• SCA: Software Composition Analysis
• WAF: Web Application Firewall
• RASP: Runtime Application Self-Protection (NextGen WAF)
• Manual Pen Testing

Podcast: Play in new window | Download