“It's a good place to start and look for assistance, even if you are not strictly AppSec.”

Transcript evidence from Chen Gour-Arie -- The AppSec Map.