Josh Grossman--AI & SAST: Is it a match?
AI coding tools are accelerating development fast, but they’re also exposing the limits of traditional AppSec tooling.
Listen to the episodeStart here by topic
The homepage points you to three episodes listeners actually keep coming back to. This is the other way in: one episode per major subject the show keeps returning to — from the last year where one exists, and the one that actually spends its runtime on the subject rather than the one that merely mentioned it most recently.
Security Testing
88 episodes →Threat Modeling
88 episodes →The Future of Open-Source Threat Modeling
You don’t have to let AI do the thinking for you. In this episode, Vikram shares why the smartest teams use AI as an accelerant — not a replacement — and…
Listen to the episodeSoftware Supply Chain
59 episodes →José Carlos Chávez - When Museums Get Hacked: OWASP Top 10 Lessons from Heists
In this episode, we sit down with Jose Carlos Chavez from Okta to break down the OWASP Top 10 for 2025 and what actually changed since 2021.
Listen to the episodeVulnerabilities and Exploits
51 episodes →Isaac Evans - AppSec in the Age of AI
In this episode, we sit down with Isaac Evans, co-founder and CEO of Semgrep, to talk about how AI is reshaping application security faster than almost anyone expected.
Listen to the episodeOWASP Projects
46 episodes →OWASP Candidate Debate - 2025 Edition
In this special episode of the Application Security Podcast we meet nine of the OWASP Board of Directors candidates.
Listen to the episodeDevSecOps and CI/CD
45 episodes →Akansha Shukla - Modern AppSec: Securing APIs with Threat Modeling and DevSecOps
Our guest today is Akansha Shukla, an information security professional with over 10 years of experience in application security, DevSecOps, and API security.
Listen to the episodeWant the full picture on a subject rather than just an entry point? Every topic page lists every episode that spends real time there — see all topics.