“Don't forget about open source, because there's a lot of free security out there through OWASP and otherwise”

Transcript evidence from Steve Giguere -- Cloud AppSec.