91 episodes in the archive
Security Testing
SAST, DAST, IAST, fuzzing and penetration testing, and the false-positive problem that decides whether any of them get used.
Often intersects with
One idea to hear
Give agents security guidance and human oversight
I think you need to give a lot of these agents secure guidelines in their agent prompts or in their tools. I think you still need to have humans in the loop.
- Recurring voice
- Tanya Janca
- From the toolbox
- OWASP ZAP