“Then the second thing you have to keep in mind is, okay, there's some level of security that makes sense for my organization.”

Transcript evidence from Hillel Solow -- How to do AppSec without a security team.