AI Pen Testing Killed Traditional DAST
Is traditional DAST finally dead? James Berthoty explains how AI pentesting is changing the dynamics of security testing through contextual payloads,…
Listen to the episodeChris Romeo · Robert Hurlbut|308 episodes · 192 hours · since 2016
Latest episode
Security Champions
48 min
What makes a security champions program successful—and why do so many fail? Lisi Hocke explains how psychological safety, cognitive load, power sources, and…
Start here
Three hundred episodes is a lot. Start with these, or browse by topic instead.
Nov 17, 2020 · 25 min
The Threat Modeling Manifesto – Part 1
Oct 28, 2025 · 42 min
Brad Geesaman - Redefining AppSec with AI: Shrinking Toil, Expanding Impact - How LLMs are able to reduce toil in triage-heavy AppSec workflows
Brad Geesaman
May 15, 2023 · 47 min
Jeevan Singh -- The Future of Application Security Engineers
Jeevan Singh
More episodes
All 308AI Security: OWASP Meets Global Standards
AI security has no shortage of standards—but how do we turn them into practical guidance? Rob van der Veer explains how OWASP, the AI Exchange, and MOSAIC are coordinating global AI security efforts.
Listen to the episodeThe Future of Open-Source Threat Modeling
You don’t have to let AI do the thinking for you. In this episode, Vikram shares why the smartest teams use AI as an accelerant — not a replacement — and…
Listen to the episodeIsaac Evans - AppSec in the Age of AI
In this episode, we sit down with Isaac Evans, co-founder and CEO of Semgrep, to talk about how AI is reshaping application security faster than almost anyone expected.
Listen to the episodeJosé Carlos Chávez - When Museums Get Hacked: OWASP Top 10 Lessons from Heists
In this episode, we sit down with Jose Carlos Chavez from Okta to break down the OWASP Top 10 for 2025 and what actually changed since 2021.
Listen to the episode
0:00--:--