<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://appsecpodcast.com/</loc></url><url><loc>https://appsecpodcast.com/aaron-davis-lavamoat-solving-javascript-software-supply-chain/</loc></url><url><loc>https://appsecpodcast.com/aaron-guzman-iotgoat/</loc></url><url><loc>https://appsecpodcast.com/aaron-rinehart-chaos-engineering-and-appsec/</loc></url><url><loc>https://appsecpodcast.com/aaron-rinehart-security-chaos-engineering/</loc></url><url><loc>https://appsecpodcast.com/abhay-bhargav-threat-modeling-as-code/</loc></url><url><loc>https://appsecpodcast.com/about/</loc></url><url><loc>https://appsecpodcast.com/adam-bacchus-and-jon-bottarini-two-sides-to-a-bug-bounty-the-researcher-and-the-program/</loc></url><url><loc>https://appsecpodcast.com/adam-shostack-fast-cheap-and-good-threat-models/</loc></url><url><loc>https://appsecpodcast.com/adam-shostack-remote-threat-modeling/</loc></url><url><loc>https://appsecpodcast.com/adam-shostack-the-jenga-view-of-threat-modeling/</loc></url><url><loc>https://appsecpodcast.com/adam-shostack-think-like-an-attacker-or-accountant/</loc></url><url><loc>https://appsecpodcast.com/adam-shostack-threat-modeling-5-minute-appsec/</loc></url><url><loc>https://appsecpodcast.com/adam-shostack-threat-modeling-layer-8-and-conflict-modeling/</loc></url><url><loc>https://appsecpodcast.com/aditya-gupta-the-exploitation-of-iot/</loc></url><url><loc>https://appsecpodcast.com/akansha-shukla-modern-appsec-securing-apis-with-threat-modeling-and-devsecops/</loc></url><url><loc>https://appsecpodcast.com/alex-mor-application-risk-profiling-at-scale/</loc></url><url><loc>https://appsecpodcast.com/alex-olsen-security-champions-empowering-developers-and-appsec-training/</loc></url><url><loc>https://appsecpodcast.com/alyssa-miller-bringing-security-to-devops-and-the-ci-cd-pipeline/</loc></url><url><loc>https://appsecpodcast.com/alyssa-miller-experiences-with-devops-automation-and-beyond/</loc></url><url><loc>https://appsecpodcast.com/anastasiia-voitova-encryption-is-easy-key-management-is-hard/</loc></url><url><loc>https://appsecpodcast.com/anastasiia-voitova-use-cryptography-don-t-learn-it/</loc></url><url><loc>https://appsecpodcast.com/andrew-van-der-stock-and-brian-glas-the-future-of-the-owasp-top-10/</loc></url><url><loc>https://appsecpodcast.com/andrew-van-der-stock-taking-application-security-to-the-masses/</loc></url><url><loc>https://appsecpodcast.com/andrew-van-der-stock-the-new-owasp-top-ten/</loc></url><url><loc>https://appsecpodcast.com/apollo-clark-malicious-user-stories/</loc></url><url><loc>https://appsecpodcast.com/aram-hovsepyan-your-security-dashboard-is-lying-to-you-the-science-of-metrics/</loc></url><url><loc>https://appsecpodcast.com/arshan-dabirsiaghi-security-startups-ai-influencing-appsec-and-pixee-codemodder-io/</loc></url><url><loc>https://appsecpodcast.com/aviat-jean-baptiste-the-appsec-report/</loc></url><url><loc>https://appsecpodcast.com/bill-dougherty-includes-no-dirt-practical-threat-modeling-for-healthcare-and-beyond/</loc></url><url><loc>https://appsecpodcast.com/bill-sempf-development-security-and-teaching-the-next-generation/</loc></url><url><loc>https://appsecpodcast.com/bill-sempf-growing-appsec-people-and-kidzmash/</loc></url><url><loc>https://appsecpodcast.com/bill-sempf-insecure-deserialization/</loc></url><url><loc>https://appsecpodcast.com/bill-wilder-running-azure-securely/</loc></url><url><loc>https://appsecpodcast.com/bjorn-kimminich-juiceshop-5-minute-appsec/</loc></url><url><loc>https://appsecpodcast.com/bjorn-kimminich-owasp-juice-shop/</loc></url><url><loc>https://appsecpodcast.com/bjorn-kimminich-the-joy-of-the-vulnerable-web-juiceshop/</loc></url><url><loc>https://appsecpodcast.com/bjorn-kimminich-the-new-juiceshop-gsoc-and-open-security-summit/</loc></url><url><loc>https://appsecpodcast.com/brad-geesaman-redefining-appsec-with-ai-shrinking-toil-expanding-impact-how-llms-are-able-to-reduce-toil-in-triage-heavy-appsec-workflows/</loc></url><url><loc>https://appsecpodcast.com/brenna-leath-product-security-leads-a-different-way-of-approaching-security-champions/</loc></url><url><loc>https://appsecpodcast.com/brett-crawley-threat-modeling-gameplay-with-eop/</loc></url><url><loc>https://appsecpodcast.com/brett-smith-security-is-a-necessary-evil/</loc></url><url><loc>https://appsecpodcast.com/brian-andrzejewski-containers-again/</loc></url><url><loc>https://appsecpodcast.com/brian-reed-mobile-appsec-the-good-the-bad-and-the-ugly-as-we-head-into-2021/</loc></url><url><loc>https://appsecpodcast.com/brook-s-e-schoenfield-security-in-the-design-and-architecture/</loc></url><url><loc>https://appsecpodcast.com/brook-schoenfield-security-is-a-messy-problem/</loc></url><url><loc>https://appsecpodcast.com/caroline-wong-self-care-and-self-aware-for-security-people/</loc></url><url><loc>https://appsecpodcast.com/caroline-wong-the-ai-cybersecurity-handbook/</loc></url><url><loc>https://appsecpodcast.com/caroline-wong-the-state-of-penetration-testing/</loc></url><url><loc>https://appsecpodcast.com/charles-shirer-the-most-positive-person-in-security/</loc></url><url><loc>https://appsecpodcast.com/chase-schultz-appsec-and-hardware/</loc></url><url><loc>https://appsecpodcast.com/chen-gour-arie-the-appsec-map/</loc></url><url><loc>https://appsecpodcast.com/chris-and-robert-a-taste-of-hi-5/</loc></url><url><loc>https://appsecpodcast.com/chris-and-robert-appsec-recommendations/</loc></url><url><loc>https://appsecpodcast.com/chris-and-robert-controversy-within-the-owasp-top-10-rc/</loc></url><url><loc>https://appsecpodcast.com/chris-and-robert-introductions-and-why-appsec/</loc></url><url><loc>https://appsecpodcast.com/chris-and-robert-passwords-identity-and-appsec/</loc></url><url><loc>https://appsecpodcast.com/chris-and-robert-proactive-controls-appsec-usa-and-gartners-mq-on-appsec-testing/</loc></url><url><loc>https://appsecpodcast.com/chris-and-robert-security-champions/</loc></url><url><loc>https://appsecpodcast.com/chris-and-robert-security-in-the-methodology/</loc></url><url><loc>https://appsecpodcast.com/chris-and-robert-the-activities-of-the-secure-development-lifecycle/</loc></url><url><loc>https://appsecpodcast.com/chris-hughes-software-transparency/</loc></url><url><loc>https://appsecpodcast.com/chris-john-riley-mvsp-minimum-viable-secure-product/</loc></url><url><loc>https://appsecpodcast.com/chris-romeo-appsec-awareness-a-blue-print-for-security-culture-change/</loc></url><url><loc>https://appsecpodcast.com/chris-romeo-devsecops-fails/</loc></url><url><loc>https://appsecpodcast.com/chris-romeo-security-community-at-any-scale/</loc></url><url><loc>https://appsecpodcast.com/chris-romeo-security-culture-hacking-disrupting-the-security-status-quo/</loc></url><url><loc>https://appsecpodcast.com/chris-romeo-the-security-journey-story/</loc></url><url><loc>https://appsecpodcast.com/chris-romeo-the-state-of-security-and-the-importance-of-empathy/</loc></url><url><loc>https://appsecpodcast.com/christian-folini-crs-and-an-abstraction-layer/</loc></url><url><loc>https://appsecpodcast.com/christian-frichot-threat-modeling-with-hcltm/</loc></url><url><loc>https://appsecpodcast.com/cindy-blake-aligning-security-testing-with-agile-development/</loc></url><url><loc>https://appsecpodcast.com/conclusion-all-the-pieces-you-need-for-an-appsec-program/</loc></url><url><loc>https://appsecpodcast.com/conclusion-owasp-is-for-everyone/</loc></url><url><loc>https://appsecpodcast.com/conclusion-season-4-finale/</loc></url><url><loc>https://appsecpodcast.com/conclusion-the-end-of-season-1/</loc></url><url><loc>https://appsecpodcast.com/dag-flachet-kaizen-for-your-appsec-program/</loc></url><url><loc>https://appsecpodcast.com/dan-kuykendall-why-all-application-security-products-suck/</loc></url><url><loc>https://appsecpodcast.com/daniel-miessler-owasp-iot-top-10/</loc></url><url><loc>https://appsecpodcast.com/daniel-ramsbrock-web-application-pen-testing-part-1/</loc></url><url><loc>https://appsecpodcast.com/daniel-ramsbrock-web-application-pen-testing-part-2/</loc></url><url><loc>https://appsecpodcast.com/dave-ferguson-the-owasp-top-10-proactive-controls/</loc></url><url><loc>https://appsecpodcast.com/david-habusha-third-party-software-is-not-a-cathedral-it-s-a-bazaar/</loc></url><url><loc>https://appsecpodcast.com/david-kosorok-the-three-pillars-of-an-appsec-program-prevent-detect-and-react/</loc></url><url><loc>https://appsecpodcast.com/david-quisenberry-building-security-people-and-programs/</loc></url><url><loc>https://appsecpodcast.com/deidre-diamond-the-soft-skills-of-appsec/</loc></url><url><loc>https://appsecpodcast.com/derek-fisher-hiring-in-cyber-appsec/</loc></url><url><loc>https://appsecpodcast.com/derek-fisher-the-application-security-handbook/</loc></url><url><loc>https://appsecpodcast.com/devin-mcmasters-bug-bounty-with-a-side-of-empathy/</loc></url><url><loc>https://appsecpodcast.com/devin-rudnicki-expanding-appsec/</loc></url><url><loc>https://appsecpodcast.com/dima-kotik-application-security-and-the-zen-of-python/</loc></url><url><loc>https://appsecpodcast.com/dj-schleen-devops-the-sec-is-silent/</loc></url><url><loc>https://appsecpodcast.com/dmitry-sotnikov-rest-api-security-there-is-no-silver-bullet/</loc></url><url><loc>https://appsecpodcast.com/dominique-righetto-owasp-secure-headers/</loc></url><url><loc>https://appsecpodcast.com/dr-anita-d-amico-do-certain-types-of-developers-or-teams-write-more-secure-code/</loc></url><url><loc>https://appsecpodcast.com/dr-jared-demott-cloud-security-bug-bounty/</loc></url><url><loc>https://appsecpodcast.com/drew-dennison-security-should-make-the-computer-sweat-more/</loc></url><url><loc>https://appsecpodcast.com/dustin-lehr-advocating-and-being-on-the-side-of-developers/</loc></url><url><loc>https://appsecpodcast.com/dustin-lehr-culture-change-through-champions-and-gamification/</loc></url><url><loc>https://appsecpodcast.com/dwayne-mcdaniel-secrets-sprawl-and-how-ai-is-impacting-secrets/</loc></url><url><loc>https://appsecpodcast.com/eitan-worcel-is-ai-a-security-champion/</loc></url><url><loc>https://appsecpodcast.com/elena-elkina-privacy-and-data-protection/</loc></url><url><loc>https://appsecpodcast.com/elie-saad-owasp-wstg-cheat-sheets-and-integration/</loc></url><url><loc>https://appsecpodcast.com/elissa-shevinsky-be-kind-security-people-5-minute-appsec/</loc></url><url><loc>https://appsecpodcast.com/elissa-shevinsky-static-analysis-early-and-often/</loc></url><url><loc>https://appsecpodcast.com/episodes/</loc></url><url><loc>https://appsecpodcast.com/eran-kinsbruner-devsecops-continuous-testing/</loc></url><url><loc>https://appsecpodcast.com/erez-yalon-and-liora-herman-the-application-security-village-defcon/</loc></url><url><loc>https://appsecpodcast.com/erez-yalon-appsec-village-5-minute-appsec/</loc></url><url><loc>https://appsecpodcast.com/erez-yalon-the-owasp-api-security-project/</loc></url><url><loc>https://appsecpodcast.com/eric-johnson-continuous-integration-in-net/</loc></url><url><loc>https://appsecpodcast.com/erik-cabetas-cracking-codes-on-screen-and-in-contests-an-expert-s-view-on-hacking-vulnerabilities-and-the-evolution-of-cybersecurity-language/</loc></url><url><loc>https://appsecpodcast.com/erlend-oftedal-what-you-require-you-must-also-retire/</loc></url><url><loc>https://appsecpodcast.com/farshad-abasi-three-models-for-deploying-appsec-resources/</loc></url><url><loc>https://appsecpodcast.com/follow/</loc></url><url><loc>https://appsecpodcast.com/francesco-cipollone-agentic-ai-manifesto/</loc></url><url><loc>https://appsecpodcast.com/francesco-cipollone-application-security-posture-management-and-the-power-of-working-with-the-business/</loc></url><url><loc>https://appsecpodcast.com/francois-proulx-actionable-software-supply-chain-security/</loc></url><url><loc>https://appsecpodcast.com/francois-proulx-arbitrary-code-execution-0-day-in-build-pipeline-of-popular-open-source-packages/</loc></url><url><loc>https://appsecpodcast.com/frank-rietta-the-convergence-of-ruby-on-rails-and-appsec/</loc></url><url><loc>https://appsecpodcast.com/geoff-hill-appsec-devsecops-and-diplomacy/</loc></url><url><loc>https://appsecpodcast.com/geoff-hill-rapid-threat-model-prototyping-process/</loc></url><url><loc>https://appsecpodcast.com/georgia-weidman-mobile-iot-and-pen-testing/</loc></url><url><loc>https://appsecpodcast.com/getting-ready-for-the-eu-cra/</loc></url><url><loc>https://appsecpodcast.com/glenn-leifheit-an-inner-glimpse-of-the-microsoft-sdl/</loc></url><url><loc>https://appsecpodcast.com/graham-holmes-adversarial-machine-learning/</loc></url><url><loc>https://appsecpodcast.com/grant-ongers-gamification-of-threat-modeling/</loc></url><url><loc>https://appsecpodcast.com/guests/</loc></url><url><loc>https://appsecpodcast.com/guests/aaron-davis/</loc></url><url><loc>https://appsecpodcast.com/guests/aaron-guzman/</loc></url><url><loc>https://appsecpodcast.com/guests/aaron-rinehart/</loc></url><url><loc>https://appsecpodcast.com/guests/abhay-bhargav/</loc></url><url><loc>https://appsecpodcast.com/guests/adam-bacchus/</loc></url><url><loc>https://appsecpodcast.com/guests/adam-shostack/</loc></url><url><loc>https://appsecpodcast.com/guests/aditya-gupta/</loc></url><url><loc>https://appsecpodcast.com/guests/akansha-shukla/</loc></url><url><loc>https://appsecpodcast.com/guests/alex-mor/</loc></url><url><loc>https://appsecpodcast.com/guests/alex-olsen/</loc></url><url><loc>https://appsecpodcast.com/guests/alyssa-miller/</loc></url><url><loc>https://appsecpodcast.com/guests/anastasiia-voitova/</loc></url><url><loc>https://appsecpodcast.com/guests/andra-lezza/</loc></url><url><loc>https://appsecpodcast.com/guests/andrew-van-der-stock/</loc></url><url><loc>https://appsecpodcast.com/guests/anita-d-amico/</loc></url><url><loc>https://appsecpodcast.com/guests/apollo-clark/</loc></url><url><loc>https://appsecpodcast.com/guests/aram-hovsepyan/</loc></url><url><loc>https://appsecpodcast.com/guests/arshan-dabirsiaghi/</loc></url><url><loc>https://appsecpodcast.com/guests/avi-douglen/</loc></url><url><loc>https://appsecpodcast.com/guests/aviat-jean-baptiste/</loc></url><url><loc>https://appsecpodcast.com/guests/bart-de-win/</loc></url><url><loc>https://appsecpodcast.com/guests/ben-de-haan/</loc></url><url><loc>https://appsecpodcast.com/guests/bill-dougherty/</loc></url><url><loc>https://appsecpodcast.com/guests/bill-sempf/</loc></url><url><loc>https://appsecpodcast.com/guests/bill-wilder/</loc></url><url><loc>https://appsecpodcast.com/guests/bjorn-kimminich/</loc></url><url><loc>https://appsecpodcast.com/guests/brad-geesaman/</loc></url><url><loc>https://appsecpodcast.com/guests/brenna-leath/</loc></url><url><loc>https://appsecpodcast.com/guests/brett-crawley/</loc></url><url><loc>https://appsecpodcast.com/guests/brett-smith/</loc></url><url><loc>https://appsecpodcast.com/guests/brian-andrzejewski/</loc></url><url><loc>https://appsecpodcast.com/guests/brian-glas/</loc></url><url><loc>https://appsecpodcast.com/guests/brian-reed/</loc></url><url><loc>https://appsecpodcast.com/guests/brook-s-e-schoenfield/</loc></url><url><loc>https://appsecpodcast.com/guests/brook-schoenfield/</loc></url><url><loc>https://appsecpodcast.com/guests/caroline-wong/</loc></url><url><loc>https://appsecpodcast.com/guests/charles-shirer/</loc></url><url><loc>https://appsecpodcast.com/guests/chase-schultz/</loc></url><url><loc>https://appsecpodcast.com/guests/chen-gour-arie/</loc></url><url><loc>https://appsecpodcast.com/guests/chris-hughes/</loc></url><url><loc>https://appsecpodcast.com/guests/chris-john-riley/</loc></url><url><loc>https://appsecpodcast.com/guests/chris-romeo/</loc></url><url><loc>https://appsecpodcast.com/guests/christian-folini/</loc></url><url><loc>https://appsecpodcast.com/guests/christian-frichot/</loc></url><url><loc>https://appsecpodcast.com/guests/cindy-blake/</loc></url><url><loc>https://appsecpodcast.com/guests/dag-flachet/</loc></url><url><loc>https://appsecpodcast.com/guests/dan-kuykendall/</loc></url><url><loc>https://appsecpodcast.com/guests/daniel-krivelevich/</loc></url><url><loc>https://appsecpodcast.com/guests/daniel-miessler/</loc></url><url><loc>https://appsecpodcast.com/guests/daniel-ramsbrock/</loc></url><url><loc>https://appsecpodcast.com/guests/darylynn-ross/</loc></url><url><loc>https://appsecpodcast.com/guests/dave-ferguson/</loc></url><url><loc>https://appsecpodcast.com/guests/david-habusha/</loc></url><url><loc>https://appsecpodcast.com/guests/david-kosorok/</loc></url><url><loc>https://appsecpodcast.com/guests/david-quisenberry/</loc></url><url><loc>https://appsecpodcast.com/guests/deidre-diamond/</loc></url><url><loc>https://appsecpodcast.com/guests/derek-fisher/</loc></url><url><loc>https://appsecpodcast.com/guests/devika-gibbs/</loc></url><url><loc>https://appsecpodcast.com/guests/devin-mcmasters/</loc></url><url><loc>https://appsecpodcast.com/guests/devin-rudnicki/</loc></url><url><loc>https://appsecpodcast.com/guests/dima-kotik/</loc></url><url><loc>https://appsecpodcast.com/guests/dj-schleen/</loc></url><url><loc>https://appsecpodcast.com/guests/dmitry-sotnikov/</loc></url><url><loc>https://appsecpodcast.com/guests/dolev-farhi/</loc></url><url><loc>https://appsecpodcast.com/guests/dominique-righetto/</loc></url><url><loc>https://appsecpodcast.com/guests/drew-dennison/</loc></url><url><loc>https://appsecpodcast.com/guests/dustin-lehr/</loc></url><url><loc>https://appsecpodcast.com/guests/dwayne-mcdaniel/</loc></url><url><loc>https://appsecpodcast.com/guests/eitan-worcel/</loc></url><url><loc>https://appsecpodcast.com/guests/elena-elkina/</loc></url><url><loc>https://appsecpodcast.com/guests/elie-saad/</loc></url><url><loc>https://appsecpodcast.com/guests/elissa-shevinsky/</loc></url><url><loc>https://appsecpodcast.com/guests/eran-kinsbruner/</loc></url><url><loc>https://appsecpodcast.com/guests/erez-yalon/</loc></url><url><loc>https://appsecpodcast.com/guests/eric-johnson/</loc></url><url><loc>https://appsecpodcast.com/guests/erik-cabetas/</loc></url><url><loc>https://appsecpodcast.com/guests/erlend-oftedal/</loc></url><url><loc>https://appsecpodcast.com/guests/farshad-abasi/</loc></url><url><loc>https://appsecpodcast.com/guests/francesco-cipollone/</loc></url><url><loc>https://appsecpodcast.com/guests/francois-proulx/</loc></url><url><loc>https://appsecpodcast.com/guests/frank-rietta/</loc></url><url><loc>https://appsecpodcast.com/guests/gavin-klondike/</loc></url><url><loc>https://appsecpodcast.com/guests/geoff-hill/</loc></url><url><loc>https://appsecpodcast.com/guests/georgia-weidman/</loc></url><url><loc>https://appsecpodcast.com/guests/glenn-leifheit/</loc></url><url><loc>https://appsecpodcast.com/guests/graham-holmes/</loc></url><url><loc>https://appsecpodcast.com/guests/grant-ongers/</loc></url><url><loc>https://appsecpodcast.com/guests/guy-barhart-magen/</loc></url><url><loc>https://appsecpodcast.com/guests/harshil-parikh/</loc></url><url><loc>https://appsecpodcast.com/guests/hasan-yasar/</loc></url><url><loc>https://appsecpodcast.com/guests/hendrik-ewerlin/</loc></url><url><loc>https://appsecpodcast.com/guests/henrik-plate/</loc></url><url><loc>https://appsecpodcast.com/guests/hillel-solow/</loc></url><url><loc>https://appsecpodcast.com/guests/irene-michlin/</loc></url><url><loc>https://appsecpodcast.com/guests/irfaan-santoe/</loc></url><url><loc>https://appsecpodcast.com/guests/isaac-evans/</loc></url><url><loc>https://appsecpodcast.com/guests/itzik-alvas/</loc></url><url><loc>https://appsecpodcast.com/guests/izar-tarandach/</loc></url><url><loc>https://appsecpodcast.com/guests/jahanzeb-farooq/</loc></url><url><loc>https://appsecpodcast.com/guests/james-berthoty/</loc></url><url><loc>https://appsecpodcast.com/guests/james-jardine/</loc></url><url><loc>https://appsecpodcast.com/guests/james-mckee/</loc></url><url><loc>https://appsecpodcast.com/guests/james-ransome/</loc></url><url><loc>https://appsecpodcast.com/guests/jannik-hollenbach/</loc></url><url><loc>https://appsecpodcast.com/guests/jared-demott/</loc></url><url><loc>https://appsecpodcast.com/guests/jason-nelson/</loc></url><url><loc>https://appsecpodcast.com/guests/javan-rasokat/</loc></url><url><loc>https://appsecpodcast.com/guests/jay-beale/</loc></url><url><loc>https://appsecpodcast.com/guests/jay-bobo/</loc></url><url><loc>https://appsecpodcast.com/guests/jb-aviat/</loc></url><url><loc>https://appsecpodcast.com/guests/jc-herz/</loc></url><url><loc>https://appsecpodcast.com/guests/jeevan-singh/</loc></url><url><loc>https://appsecpodcast.com/guests/jeff-williams/</loc></url><url><loc>https://appsecpodcast.com/guests/jeremy-long/</loc></url><url><loc>https://appsecpodcast.com/guests/jeroen-willemsen/</loc></url><url><loc>https://appsecpodcast.com/guests/jessica-robinson/</loc></url><url><loc>https://appsecpodcast.com/guests/jet-anderson/</loc></url><url><loc>https://appsecpodcast.com/guests/jim-manico/</loc></url><url><loc>https://appsecpodcast.com/guests/jim-routh/</loc></url><url><loc>https://appsecpodcast.com/guests/joern-freydank/</loc></url><url><loc>https://appsecpodcast.com/guests/john-martin/</loc></url><url><loc>https://appsecpodcast.com/guests/john-melton/</loc></url><url><loc>https://appsecpodcast.com/guests/john-viega/</loc></url><url><loc>https://appsecpodcast.com/guests/jon-bottarini/</loc></url><url><loc>https://appsecpodcast.com/guests/jon-mccoy/</loc></url><url><loc>https://appsecpodcast.com/guests/jonathan-marcil/</loc></url><url><loc>https://appsecpodcast.com/guests/jose-carlos-chavez/</loc></url><url><loc>https://appsecpodcast.com/guests/josh-grossman/</loc></url><url><loc>https://appsecpodcast.com/guests/joshua-wells/</loc></url><url><loc>https://appsecpodcast.com/guests/julien-vehent/</loc></url><url><loc>https://appsecpodcast.com/guests/justin-collins/</loc></url><url><loc>https://appsecpodcast.com/guests/kalyani-pawar/</loc></url><url><loc>https://appsecpodcast.com/guests/karen-staley/</loc></url><url><loc>https://appsecpodcast.com/guests/katharina-koerner/</loc></url><url><loc>https://appsecpodcast.com/guests/katy-anton/</loc></url><url><loc>https://appsecpodcast.com/guests/kayra-otaner/</loc></url><url><loc>https://appsecpodcast.com/guests/ken-toler/</loc></url><url><loc>https://appsecpodcast.com/guests/kevin-greene/</loc></url><url><loc>https://appsecpodcast.com/guests/kevin-johnson/</loc></url><url><loc>https://appsecpodcast.com/guests/kim-wuyts/</loc></url><url><loc>https://appsecpodcast.com/guests/kristen-tan/</loc></url><url><loc>https://appsecpodcast.com/guests/kyle-kelly/</loc></url><url><loc>https://appsecpodcast.com/guests/leif-dreizler/</loc></url><url><loc>https://appsecpodcast.com/guests/liora-herman/</loc></url><url><loc>https://appsecpodcast.com/guests/liran-tal/</loc></url><url><loc>https://appsecpodcast.com/guests/loren-kohnfelder/</loc></url><url><loc>https://appsecpodcast.com/guests/magen-wu/</loc></url><url><loc>https://appsecpodcast.com/guests/marc-french/</loc></url><url><loc>https://appsecpodcast.com/guests/maril-vernon/</loc></url><url><loc>https://appsecpodcast.com/guests/marisa-fagan/</loc></url><url><loc>https://appsecpodcast.com/guests/mark-curphey/</loc></url><url><loc>https://appsecpodcast.com/guests/mark-loveless/</loc></url><url><loc>https://appsecpodcast.com/guests/mark-merkow/</loc></url><url><loc>https://appsecpodcast.com/guests/mark-willis/</loc></url><url><loc>https://appsecpodcast.com/guests/martin-knobloch/</loc></url><url><loc>https://appsecpodcast.com/guests/matin-mavaddat/</loc></url><url><loc>https://appsecpodcast.com/guests/matt-clapham/</loc></url><url><loc>https://appsecpodcast.com/guests/matt-coles/</loc></url><url><loc>https://appsecpodcast.com/guests/matt-konda/</loc></url><url><loc>https://appsecpodcast.com/guests/matt-mcgrath/</loc></url><url><loc>https://appsecpodcast.com/guests/matt-rose/</loc></url><url><loc>https://appsecpodcast.com/guests/matt-tesauro/</loc></url><url><loc>https://appsecpodcast.com/guests/maya-kaczorowski/</loc></url><url><loc>https://appsecpodcast.com/guests/mazin-ahmed/</loc></url><url><loc>https://appsecpodcast.com/guests/megan-roddie/</loc></url><url><loc>https://appsecpodcast.com/guests/meghan-jacquot/</loc></url><url><loc>https://appsecpodcast.com/guests/mehran-koushkebaghi/</loc></url><url><loc>https://appsecpodcast.com/guests/michael-bargury/</loc></url><url><loc>https://appsecpodcast.com/guests/michael-burch/</loc></url><url><loc>https://appsecpodcast.com/guests/michael-furman/</loc></url><url><loc>https://appsecpodcast.com/guests/michael-santarcangelo/</loc></url><url><loc>https://appsecpodcast.com/guests/mike-goodwin/</loc></url><url><loc>https://appsecpodcast.com/guests/mike-landeck/</loc></url><url><loc>https://appsecpodcast.com/guests/milan-williams/</loc></url><url><loc>https://appsecpodcast.com/guests/mo-sadek/</loc></url><url><loc>https://appsecpodcast.com/guests/mohammed-imran/</loc></url><url><loc>https://appsecpodcast.com/guests/mukund-sarma/</loc></url><url><loc>https://appsecpodcast.com/guests/nancy-gariche/</loc></url><url><loc>https://appsecpodcast.com/guests/neil-matatall/</loc></url><url><loc>https://appsecpodcast.com/guests/neil-smithline/</loc></url><url><loc>https://appsecpodcast.com/guests/nick-aleks/</loc></url><url><loc>https://appsecpodcast.com/guests/nicole-becher/</loc></url><url><loc>https://appsecpodcast.com/guests/niels-tanis/</loc></url><url><loc>https://appsecpodcast.com/guests/ochaun-marshall/</loc></url><url><loc>https://appsecpodcast.com/guests/ofer-maor/</loc></url><url><loc>https://appsecpodcast.com/guests/omer-gil/</loc></url><url><loc>https://appsecpodcast.com/guests/omer-levi-hevroni/</loc></url><url><loc>https://appsecpodcast.com/guests/patrick-dwyer/</loc></url><url><loc>https://appsecpodcast.com/guests/paul-mccarty/</loc></url><url><loc>https://appsecpodcast.com/guests/pete-chestna/</loc></url><url><loc>https://appsecpodcast.com/guests/phillip-wylie/</loc></url><url><loc>https://appsecpodcast.com/guests/rafal-los/</loc></url><url><loc>https://appsecpodcast.com/guests/ray-espinoza/</loc></url><url><loc>https://appsecpodcast.com/guests/rob-van-der-veer/</loc></url><url><loc>https://appsecpodcast.com/guests/robert-hurlbut/</loc></url><url><loc>https://appsecpodcast.com/guests/robyn-lundin/</loc></url><url><loc>https://appsecpodcast.com/guests/ronnie-flathers/</loc></url><url><loc>https://appsecpodcast.com/guests/sam-stepanyan/</loc></url><url><loc>https://appsecpodcast.com/guests/sarah-jane-madden/</loc></url><url><loc>https://appsecpodcast.com/guests/sean-varga/</loc></url><url><loc>https://appsecpodcast.com/guests/sean-wright/</loc></url><url><loc>https://appsecpodcast.com/guests/sebastien-deleersnyder/</loc></url><url><loc>https://appsecpodcast.com/guests/simon-bennetts/</loc></url><url><loc>https://appsecpodcast.com/guests/simon-gibbs/</loc></url><url><loc>https://appsecpodcast.com/guests/stephen-de-vries/</loc></url><url><loc>https://appsecpodcast.com/guests/steve-giguere/</loc></url><url><loc>https://appsecpodcast.com/guests/steve-lipner/</loc></url><url><loc>https://appsecpodcast.com/guests/steve-springett/</loc></url><url><loc>https://appsecpodcast.com/guests/steve-wilson/</loc></url><url><loc>https://appsecpodcast.com/guests/steven-wierckx/</loc></url><url><loc>https://appsecpodcast.com/guests/swaroop-yermalkar/</loc></url><url><loc>https://appsecpodcast.com/guests/tanya-janca/</loc></url><url><loc>https://appsecpodcast.com/guests/tiago-mendo/</loc></url><url><loc>https://appsecpodcast.com/guests/timo-pagel/</loc></url><url><loc>https://appsecpodcast.com/guests/tin-zaw/</loc></url><url><loc>https://appsecpodcast.com/guests/tommy-ross/</loc></url><url><loc>https://appsecpodcast.com/guests/tony-quadros/</loc></url><url><loc>https://appsecpodcast.com/guests/tony-turner/</loc></url><url><loc>https://appsecpodcast.com/guests/tony-ucedavelez/</loc></url><url><loc>https://appsecpodcast.com/guests/tony-uv/</loc></url><url><loc>https://appsecpodcast.com/guests/tracy-maleeff/</loc></url><url><loc>https://appsecpodcast.com/guests/travis-mcpeak/</loc></url><url><loc>https://appsecpodcast.com/guests/vaibhav-garg/</loc></url><url><loc>https://appsecpodcast.com/guests/vandana-verma/</loc></url><url><loc>https://appsecpodcast.com/guests/varun-badhwar/</loc></url><url><loc>https://appsecpodcast.com/guests/will-ratner/</loc></url><url><loc>https://appsecpodcast.com/guests/wolfgang-goerlich/</loc></url><url><loc>https://appsecpodcast.com/guests/zoe-braiterman/</loc></url><url><loc>https://appsecpodcast.com/guests/zohar-shachar/</loc></url><url><loc>https://appsecpodcast.com/guests/zsolt-imre/</loc></url><url><loc>https://appsecpodcast.com/guy-barhart-magen-log4j-and-incident-response/</loc></url><url><loc>https://appsecpodcast.com/harshil-parikh-deep-environmental-and-organizational-context-in-application-security/</loc></url><url><loc>https://appsecpodcast.com/hasan-yasar-actionable-sbom-via-devsecops/</loc></url><url><loc>https://appsecpodcast.com/hendrik-ewerlin-threat-modeling-of-threat-modeling/</loc></url><url><loc>https://appsecpodcast.com/henrik-plate-owasp-top-10-open-source-risks/</loc></url><url><loc>https://appsecpodcast.com/hillel-solow-how-to-do-appsec-without-a-security-team/</loc></url><url><loc>https://appsecpodcast.com/irene-michlin-we-are-not-making-it-worse/</loc></url><url><loc>https://appsecpodcast.com/irfaan-santoe-the-power-of-strategy-in-appsec/</loc></url><url><loc>https://appsecpodcast.com/isaac-evans-appsec-in-the-age-of-ai/</loc></url><url><loc>https://appsecpodcast.com/itzik-alvas-secrets-security-and-management/</loc></url><url><loc>https://appsecpodcast.com/izar-tarandach-and-matt-coles-threat-modeling-a-practical-guide-for-development-teams/</loc></url><url><loc>https://appsecpodcast.com/izar-tarandach-command-line-threat-modeling-with-pytm/</loc></url><url><loc>https://appsecpodcast.com/jahanzeb-farooq-launching-and-executing-an-appsec-program/</loc></url><url><loc>https://appsecpodcast.com/james-berthoty-is-dast-dead-and-the-future-of-api-security/</loc></url><url><loc>https://appsecpodcast.com/james-mckee-developer-security/</loc></url><url><loc>https://appsecpodcast.com/james-ransome-and-brook-schoenfield-trust-and-verify-building-in-security-at-agile-speed/</loc></url><url><loc>https://appsecpodcast.com/jannik-hollenbach-multijuicer-juiceshop-with-a-side-of-kubernetes/</loc></url><url><loc>https://appsecpodcast.com/jason-nelson-three-pillars-of-threat-modeling-success-consistency-repeatability-and-efficacy/</loc></url><url><loc>https://appsecpodcast.com/javan-rasokat-and-andra-lezza-when-chatbots-go-rogue-lessons-learned-from-building-and-defending-llm-applications/</loc></url><url><loc>https://appsecpodcast.com/jay-beale-docker-security-and-appsec/</loc></url><url><loc>https://appsecpodcast.com/jay-bobo-darylynn-ross-app-sec-is-dead-product-security-is-the-future/</loc></url><url><loc>https://appsecpodcast.com/jb-aviat-the-state-of-application-security/</loc></url><url><loc>https://appsecpodcast.com/jc-herz-and-steve-springett-sboms-and-software-supply-chain-assurance/</loc></url><url><loc>https://appsecpodcast.com/jeevan-singh-the-future-of-application-security-engineers/</loc></url><url><loc>https://appsecpodcast.com/jeevan-singh-threat-modeling-based-in-democracy/</loc></url><url><loc>https://appsecpodcast.com/jeff-williams-application-detection-response-adr/</loc></url><url><loc>https://appsecpodcast.com/jeff-williams-the-history-of-owasp/</loc></url><url><loc>https://appsecpodcast.com/jeff-williams-the-tech-of-runtime-security/</loc></url><url><loc>https://appsecpodcast.com/jeremy-long-it-s-dependency-check-not-checker/</loc></url><url><loc>https://appsecpodcast.com/jeroen-willemsen-and-ben-de-haan-dirty-little-secrets/</loc></url><url><loc>https://appsecpodcast.com/jeroen-willemsen-security-automation-with-ci-cd/</loc></url><url><loc>https://appsecpodcast.com/jessica-robinson-and-vandana-verma-wia-women-in-appsec/</loc></url><url><loc>https://appsecpodcast.com/jet-anderson-the-appsec-code-doctor/</loc></url><url><loc>https://appsecpodcast.com/jim-manico-and-katy-anton-the-future-of-the-owasp-proactive-controls/</loc></url><url><loc>https://appsecpodcast.com/jim-manico-more-owasp/</loc></url><url><loc>https://appsecpodcast.com/jim-manico-the-extremely-unabridged-history-of-sqli-and-xss/</loc></url><url><loc>https://appsecpodcast.com/jim-manico-the-owasp-cheat-sheet-project/</loc></url><url><loc>https://appsecpodcast.com/jim-routh-secure-software-pipelines/</loc></url><url><loc>https://appsecpodcast.com/jim-routh-selling-appsec-up-the-chain/</loc></url><url><loc>https://appsecpodcast.com/jim-routh-the-ciso-transition-to-the-rest-of-life/</loc></url><url><loc>https://appsecpodcast.com/joern-freydank-security-design-anti-patterns-limit-security-debt/</loc></url><url><loc>https://appsecpodcast.com/john-martin-preventing-a-cyberpocalypse/</loc></url><url><loc>https://appsecpodcast.com/john-melton-owasp-appsensor/</loc></url><url><loc>https://appsecpodcast.com/jon-mccoy-and-jonathan-marcil-agile-appsec/</loc></url><url><loc>https://appsecpodcast.com/jon-mccoy-hacker-outreach/</loc></url><url><loc>https://appsecpodcast.com/jon-mccoy-the-mindset-to-reverse-engineer/</loc></url><url><loc>https://appsecpodcast.com/jose-carlos-chavez-when-museums-get-hacked-owasp-top-10-lessons-from-heists/</loc></url><url><loc>https://appsecpodcast.com/josh-grossman-ai-sast-is-it-a-match/</loc></url><url><loc>https://appsecpodcast.com/josh-grossman-avi-douglen-and-ofer-maor-appsec-in-israel-and-three-talks-to-watch-from-appsec-usa/</loc></url><url><loc>https://appsecpodcast.com/josh-grossman-building-a-high-value-appsec-scanning-program/</loc></url><url><loc>https://appsecpodcast.com/joshua-wells-application-security-in-the-age-of-zero-trust/</loc></url><url><loc>https://appsecpodcast.com/julien-vehent-securing-devops/</loc></url><url><loc>https://appsecpodcast.com/justin-collins-enabling-the-business-to-move-faster-securely/</loc></url><url><loc>https://appsecpodcast.com/kalyani-pawar-shaping-appsec-at-startups/</loc></url><url><loc>https://appsecpodcast.com/karen-staley-a-conversation-with-karen/</loc></url><url><loc>https://appsecpodcast.com/katharina-koerner-security-as-responsible-ai/</loc></url><url><loc>https://appsecpodcast.com/katy-anton-owasp-top-10-4-xxe/</loc></url><url><loc>https://appsecpodcast.com/kayra-otaner-devsecops/</loc></url><url><loc>https://appsecpodcast.com/ken-toler-blockchain-cloud-and-appsec/</loc></url><url><loc>https://appsecpodcast.com/kevin-greene-shifting-left/</loc></url><url><loc>https://appsecpodcast.com/kevin-johnson-samurai-swords-and-zap-s-departure/</loc></url><url><loc>https://appsecpodcast.com/kim-wuyts-privacy-threat-modeling/</loc></url><url><loc>https://appsecpodcast.com/kim-wuyts-the-future-of-privacy-threat-modeling/</loc></url><url><loc>https://appsecpodcast.com/kristen-tan-and-vaibhav-garg-machine-assisted-threat-modeling/</loc></url><url><loc>https://appsecpodcast.com/kyle-kelly-the-dumpster-fire-of-software-supply-chain-security/</loc></url><url><loc>https://appsecpodcast.com/leif-dreizler-tactical-tips-to-shift-engineering-right/</loc></url><url><loc>https://appsecpodcast.com/liran-tal-cloud-native-application-security-what-s-a-developer-to-do/</loc></url><url><loc>https://appsecpodcast.com/liran-tal-open-source-security-5-minute-appsec/</loc></url><url><loc>https://appsecpodcast.com/liran-tal-the-state-of-open-source-software-security/</loc></url><url><loc>https://appsecpodcast.com/loren-kohnfelder-designing-secure-software/</loc></url><url><loc>https://appsecpodcast.com/magen-wu-hustle-and-flow-dealing-with-burnout-in-security/</loc></url><url><loc>https://appsecpodcast.com/marc-french-steve-lipner-maya-kaczorowski-dj-schleen-kim-wuyts-season-six-wrap-up/</loc></url><url><loc>https://appsecpodcast.com/marc-french-the-appsec-ciso/</loc></url><url><loc>https://appsecpodcast.com/maril-vernon-you-get-what-you-inspect-not-what-you-expect/</loc></url><url><loc>https://appsecpodcast.com/marisa-fagan-measuring-security-culture/</loc></url><url><loc>https://appsecpodcast.com/mark-curphey-and-john-viega-chalk/</loc></url><url><loc>https://appsecpodcast.com/mark-curphey-and-simon-bennetts-riding-the-coat-tails-of-zap-without-open-source-funding/</loc></url><url><loc>https://appsecpodcast.com/mark-curphey-the-future-of-owasp/</loc></url><url><loc>https://appsecpodcast.com/mark-loveless-threat-modeling-in-a-devsecops-environment/</loc></url><url><loc>https://appsecpodcast.com/mark-merkow-secure-resilient-and-agile-software-development/</loc></url><url><loc>https://appsecpodcast.com/mark-willis-i-just-like-static-analysis-static-analysis-is-my-favorite/</loc></url><url><loc>https://appsecpodcast.com/martin-knobloch-owasp-reach-out-we-are-known-and-misunderstood/</loc></url><url><loc>https://appsecpodcast.com/matin-mavaddat-understanding-security-as-a-systemic-concern-the-role-of-anti-requirements/</loc></url><url><loc>https://appsecpodcast.com/matt-clapham-a-perspective-on-appsec-from-the-world-of-medical-software/</loc></url><url><loc>https://appsecpodcast.com/matt-clapham-development-security-maturity/</loc></url><url><loc>https://appsecpodcast.com/matt-clapham-the-technical-debt-ceiling/</loc></url><url><loc>https://appsecpodcast.com/matt-konda-owasp-glue/</loc></url><url><loc>https://appsecpodcast.com/matt-mcgrath-security-coaches/</loc></url><url><loc>https://appsecpodcast.com/matt-rose-software-supply-chain-security-means-many-different-things-to-different-people/</loc></url><url><loc>https://appsecpodcast.com/matt-tesauro-appsec-pipeline-as-toolbox/</loc></url><url><loc>https://appsecpodcast.com/maya-kaczorowski-container-and-orchestration-security/</loc></url><url><loc>https://appsecpodcast.com/mazin-ahmed-terraform-security/</loc></url><url><loc>https://appsecpodcast.com/megan-roddie-neurodiversity-in-security/</loc></url><url><loc>https://appsecpodcast.com/meghan-jacquot-assumed-breach-red-team-engagements-for-appsec/</loc></url><url><loc>https://appsecpodcast.com/mehran-koushkebaghi-security-as-a-systemic-concern-how-to-develop-anti-requirements/</loc></url><url><loc>https://appsecpodcast.com/michael-bargury-low-code-no-code-security-and-an-owasp-top-ten/</loc></url><url><loc>https://appsecpodcast.com/michael-burch-ai-enabled-citizen-developers/</loc></url><url><loc>https://appsecpodcast.com/michael-furman-samesite-cookies/</loc></url><url><loc>https://appsecpodcast.com/mike-goodwin-the-owasp-threat-dragon/</loc></url><url><loc>https://appsecpodcast.com/mike-landeck-security-must-meet-the-needs-of-the-business/</loc></url><url><loc>https://appsecpodcast.com/milan-williams-appsec-metrics/</loc></url><url><loc>https://appsecpodcast.com/mo-sadek-building-an-appsec-program-from-scratch/</loc></url><url><loc>https://appsecpodcast.com/mohammed-imran-back-to-the-lab-again-with-a-devops/</loc></url><url><loc>https://appsecpodcast.com/mukund-sarma-developer-tools-that-solve-security-problems/</loc></url><url><loc>https://appsecpodcast.com/nancy-gariche-and-tanya-janca-devslop-the-movement/</loc></url><url><loc>https://appsecpodcast.com/neil-matatall-appsec-at-scale/</loc></url><url><loc>https://appsecpodcast.com/neil-matatall-content-security-policy/</loc></url><url><loc>https://appsecpodcast.com/neil-smithline-owasp-top-10-10-logging/</loc></url><url><loc>https://appsecpodcast.com/nick-aleks-and-dolev-farhi-graphql-security/</loc></url><url><loc>https://appsecpodcast.com/niels-tanis-3rd-party-risk-in-a-net-world/</loc></url><url><loc>https://appsecpodcast.com/niels-tanis-a-slice-of-the-razor-with-asp-net-core/</loc></url><url><loc>https://appsecpodcast.com/ochaun-marshall-iac-and-sast/</loc></url><url><loc>https://appsecpodcast.com/ochaun-marshall-securing-web-applications-in-aws/</loc></url><url><loc>https://appsecpodcast.com/ofer-maor-a-pen-testers-transition-to-appsec-voteforofer/</loc></url><url><loc>https://appsecpodcast.com/omer-gil-and-daniel-krivelevich-top-10-ci-cd-security-risks/</loc></url><url><loc>https://appsecpodcast.com/omer-levi-hevroni-k8s-can-keep-a-secret/</loc></url><url><loc>https://appsecpodcast.com/owasp-board-of-directors-debate/</loc></url><url><loc>https://appsecpodcast.com/owasp-candidate-debate-2025-edition/</loc></url><url><loc>https://appsecpodcast.com/owasp-top-10-2021-peer-review/</loc></url><url><loc>https://appsecpodcast.com/patrick-dwyer-cyclonedx-and-sboms/</loc></url><url><loc>https://appsecpodcast.com/paul-mccarty-the-burrito-analogy-of-the-software-supply-chain/</loc></url><url><loc>https://appsecpodcast.com/pete-chestna-sast-dast-and-iast-oh-my/</loc></url><url><loc>https://appsecpodcast.com/phillip-wylie-pen-testing-from-somebody-who-knows-about-pen-testing/</loc></url><url><loc>https://appsecpodcast.com/rafal-los-james-jardine-and-michael-santarcangelo-dtsr-and-what-makes-a-good-security-consultant/</loc></url><url><loc>https://appsecpodcast.com/ray-espinoza-the-appsec-ciso-vendor-relationships-and-mentoring/</loc></url><url><loc>https://appsecpodcast.com/rob-van-der-veer-owasp-ai-security-privacy-guide/</loc></url><url><loc>https://appsecpodcast.com/robert-hurlbut-blackhat-security-conference/</loc></url><url><loc>https://appsecpodcast.com/robert-hurlbut-threat-modeling/</loc></url><url><loc>https://appsecpodcast.com/robyn-lundin-planning-organizing-a-penetration-test-as-an-appsec-team/</loc></url><url><loc>https://appsecpodcast.com/ronnie-flathers-security-programs-big-and-small/</loc></url><url><loc>https://appsecpodcast.com/sam-stepanyan-owasp-nettacker-project/</loc></url><url><loc>https://appsecpodcast.com/sarah-jane-madden-threat-modeling-to-established-teams/</loc></url><url><loc>https://appsecpodcast.com/sarah-jane-madden-what-ai-means-for-appsec/</loc></url><url><loc>https://appsecpodcast.com/sean-varga-owasp-top-10-for-appsec-sales/</loc></url><url><loc>https://appsecpodcast.com/sean-wright-google-chrome-and-the-case-of-the-disappearing-http/</loc></url><url><loc>https://appsecpodcast.com/season-5-finale-a-cross-section-of-appsec/</loc></url><url><loc>https://appsecpodcast.com/season-7-guests-the-best-of-season-7/</loc></url><url><loc>https://appsecpodcast.com/sebastien-deleersnyder-and-bart-de-win-owasp-samm/</loc></url><url><loc>https://appsecpodcast.com/simon-bennetts-owasp-zap-past-present-and-future/</loc></url><url><loc>https://appsecpodcast.com/simon-bennetts-using-owasp-zap-across-an-enterprise/</loc></url><url><loc>https://appsecpodcast.com/simon-gibbs-devika-gibbs-building-bridges-with-games/</loc></url><url><loc>https://appsecpodcast.com/sponsors/</loc></url><url><loc>https://appsecpodcast.com/stephen-de-vries-threat-modeling-with-a-bit-of-startup/</loc></url><url><loc>https://appsecpodcast.com/steve-giguere-cloud-appsec/</loc></url><url><loc>https://appsecpodcast.com/steve-lipner-the-past-present-and-future-of-sdl/</loc></url><url><loc>https://appsecpodcast.com/steve-springett-an-insiders-checklist-for-software-composition-analysis/</loc></url><url><loc>https://appsecpodcast.com/steve-springett-dependency-check-and-dependency-track/</loc></url><url><loc>https://appsecpodcast.com/steve-springett-owasp-dependency-track-5-minute-appsec/</loc></url><url><loc>https://appsecpodcast.com/steve-springett-software-and-system-transparency/</loc></url><url><loc>https://appsecpodcast.com/steve-wilson-and-gavin-klondike-owasp-top-ten-for-llm-release/</loc></url><url><loc>https://appsecpodcast.com/steve-wilson-openclaw-and-advanced-ai-agents/</loc></url><url><loc>https://appsecpodcast.com/steve-wilson-owasp-top-ten-for-llms/</loc></url><url><loc>https://appsecpodcast.com/steve-wilson-the-developer-s-playbook-for-large-language-model-security-building-secure-ai-applications/</loc></url><url><loc>https://appsecpodcast.com/steven-wierckx-the-owasp-threat-modeling-project/</loc></url><url><loc>https://appsecpodcast.com/swaroop-yermalkar-igoat-and-ios-mobile-pen-testing/</loc></url><url><loc>https://appsecpodcast.com/tanya-janca-a-secure-sdlc-from-a-developer-s-perspective/</loc></url><url><loc>https://appsecpodcast.com/tanya-janca-and-nicole-becher-hacking-apis-and-web-services-with-devslop/</loc></url><url><loc>https://appsecpodcast.com/tanya-janca-mentoring-monday-5-minute-appsec/</loc></url><url><loc>https://appsecpodcast.com/tanya-janca-secure-guardrails/</loc></url><url><loc>https://appsecpodcast.com/tanya-janca-secure-vibe-coding/</loc></url><url><loc>https://appsecpodcast.com/tanya-janca-what-secure-coding-really-means/</loc></url><url><loc>https://appsecpodcast.com/the-threat-modeling-manifesto-part-1/</loc></url><url><loc>https://appsecpodcast.com/the-threat-modeling-manifesto-part-2/</loc></url><url><loc>https://appsecpodcast.com/thinking-back-looking-forward-a-balanced-approach-to-securing-our-software-future/</loc></url><url><loc>https://appsecpodcast.com/tiago-mendo-how-to-scan-at-scale-with-owasp-zap/</loc></url><url><loc>https://appsecpodcast.com/timo-pagel-devsecops-maturity-model/</loc></url><url><loc>https://appsecpodcast.com/tin-zaw-modsecurity-and-appsec/</loc></url><url><loc>https://appsecpodcast.com/tommy-ross-the-bsa-framework-for-secure-software/</loc></url><url><loc>https://appsecpodcast.com/tony-quadros-the-life-of-an-appsec-vendor/</loc></url><url><loc>https://appsecpodcast.com/tony-turner-threat-modeling-and-sbom/</loc></url><url><loc>https://appsecpodcast.com/tony-ucedavelez-pasta-not-just-for-breakfast-anymore/</loc></url><url><loc>https://appsecpodcast.com/tony-uv-threat-libraries-in-the-cloud/</loc></url><url><loc>https://appsecpodcast.com/tracy-maleeff-natural-paranoia-as-a-career-path-a-transition-to-security/</loc></url><url><loc>https://appsecpodcast.com/travis-mcpeak-secops-makes-developers-lives-easier/</loc></url><url><loc>https://appsecpodcast.com/vandana-verma-owasp-spotlight-series/</loc></url><url><loc>https://appsecpodcast.com/vandana-verma-support-each-other/</loc></url><url><loc>https://appsecpodcast.com/varun-badhwar-the-developer-productivity-tax/</loc></url><url><loc>https://appsecpodcast.com/will-ratner-centralized-container-scanning/</loc></url><url><loc>https://appsecpodcast.com/wolfgang-goerlich-security-beyond-vulnerabilities/</loc></url><url><loc>https://appsecpodcast.com/zoe-braiterman-ai-ml-appsec-and-a-dose-of-data-protection/</loc></url><url><loc>https://appsecpodcast.com/zohar-shachar-bug-bounty-from-both-sides/</loc></url><url><loc>https://appsecpodcast.com/zsolt-imre-fuzz-testing-is-easy/</loc></url></urlset>