
Tanya Janca - Secure Vibe Coding
AI isn’t just helping developers anymore; it’s writing the code, and that changes everything. In this episode, Tanya Janca breaks down “vibe...
Radio and PodcastLive Radio & PodcastsOpening Radio and Podcast...

Radio and PodcastLive Radio & PodcastsFetching podcast shows and categories...
Radio and PodcastLive Radio & PodcastsFetching podcast episodes...

Chris and Robert deconstruct world-class Application Security experts, digging deep to find the tools, tactics, projects, and tricks that make them successful. Each episode begins with the g...

AI isn’t just helping developers anymore; it’s writing the code, and that changes everything. In this episode, Tanya Janca breaks down “vibe...

Caroline Wong, author of The AI Cybersecurity Handbook and Chief Strategy Officer at Axari, is back! Caroline shares how AI is rapidly chang...

In this episode of the Application Security Podcast, Chris Romeo and Robert Hurlbut welcome back Steve Wilson, a global leader in AI securit...

Brad Geesaman, Principal Security Engineer at Ghost, joins the podcast today to explore how AI and large language models are transforming th...

In this special episode of the Application Security Podcast we meet nine of the OWASP Board of Directors candidates. Each candidate discusse...

Francesco Cipollone, the CEO of Phoenix Security, shares his extensive experience in AI and security, discussing the crucial difference betw...

Simon and Devika Gibbs, the innovative minds behind Cybersec Games , join us on the episode today. Discover how the Gibbs duo are revolution...

Our guest today is Akansha Shukla, an information security professional with over 10 years of experience in application security, DevSecOps,...

The European Union's Cyber Resilience Act is set to revolutionize how we approach product security worldwide. In this episode, we sit d...

Marisa Fagan, Head of Product at Katilyst and veteran security culture expert joins us today to share practical strategies for building and...

Aram Hovsepyan joins the podcast today to chat about the misconceptions behind common security metrics. Aram tells us how total vulnerabilit...

We’re discussing the intersections of application security (AppSec) and sales strategy with our guest, Sean Varga. Sean shares the unique ch...

Sarah Jane Madden joins us to discuss the evolving role of AI in software development. We reflect on the changes and challenges posed by AI,...

Dag Flachet joins us to discuss the concept of Kaizen and its application in improving application security. Dag shares his journey into the...

Andra Lezza and Javan Rasokat discuss the complexities of securing AI and LLM applications. With years of experience in Application Security...

Former CISO Jim Routh discusses his perspective on retirement and career fulfillment in cybersecurity. Rather than viewing retirement as sim...

Henrik Plate joins us to discuss the OWASP Top 10 Open Source Risks, a guide highlighting critical security and operational challenges in us...

Security expert Tanya Janca discusses her new book "Alice and Bob Learn Secure Coding" and shares insights on making security accessible to...

Mehran Koushkebaghi, a seasoned engineering expert, delves into the intricacies of systemic security. He draws parallels between civil engin...

Kalyani Pawar shares critical strategies for integrating security early and effectively in AppSec for startups. She recommends that startups...

Milan Williams discusses the importance of application security metrics and how to make them both meaningful and actionable. She explains th...

Mo Sadek shares his unique journey of building an Application Security program from scratch at Roblox. Mo discusses his unconventional path,...

Brett Crawley discusses the Elevation of Privilege (EoP) card game, a powerful tool for threat modeling in software development. The discuss...

Matin Mavaddat discusses his perspective on security as a systemic concern, developed from his background in requirements engineering and sy...

Kayra Otaner joins the podcast today to discuss DevSecOps and answer the question, is it dead? Kayra is the Director of DevSecOps at Roche a...

François Proulx shares his discovery of security vulnerabilities in build pipelines. Francois has found that attackers can exploit this ofte...

Steve Wilson, the author of 'The Developer's Playbook for Large Language Model Security’ is back to dive into topics from his book...

Jeff Williams, a renowned pioneer in the field of application security is with us to discuss Application Detection and Response (ADR), detai...

Philip Wiley shares his unique journey from professional wrestling to being a renowned pen tester. We define pen testing and the role of soc...

Steve Springett, an expert in secure software development and a key figure in several OWASP projects is back. Steve unpacks CycloneDX and th...

Irfaan Santoe joins us for an in-depth discussion on the power of strategy in Application Security. We delve into measuring AppSec maturity,...

Andrew Van Der Stok, a leading web application security specialist and executive director at OWASP joins us for this episode. We discuss the...

Derek Fisher, an expert in hardware, software, and cybersecurity with over 25 years of experience is back on the podcast. Derek shares his a...

Tanya Janka, also known as SheHacksPurple, discusses secure guardrails, the difference between guardrails and paved roads, and how to implem...

Jahanzeb Farooq discusses his journey in cybersecurity and the challenges of building AppSec programs from scratch. Jahanzeb shares his expe...

David Quisenberry shares about his journey into the security world, insights on building AppSec programs in small to mid-sized companies, an...

Matt Rose, an experienced technical AppSec testing leader discusses his career journey and significant contributions in AppSec. The conversa...

James Berthoty, a cloud security engineer with a diverse IT background, discusses his journey into application and product security. James h...

Mark Curphey and Simon Bennetts, join Chris on the podcast to discuss the challenges of funding and sustaining major open source security pr...

Devon Rudnicki, the Chief Information Security Officer at Fitch Group, shares her journey of developing an application security program from...

Dustin Lehr, Senior Director of Platform Security/Deputy CISO at Fivetran and Chief Solutions Officer at Katilyst Security, joins Robert and...

Francesco Cipollone, CEO of Phoenix Security, joins Chris and Robert to discuss security and explain Application Security Posture Management...

Mukund Sarma, the Senior Director for Product Security at Chime, talks with Chris about his career path from being a software engineer to be...

AppSec specialist Megan Jacquot joins Chris and Robert for a compelling conversation about community, career paths, and productive red team...

Robert is joined by Bill Sempf, an application security architect with over 20 years of experience in software development and security. Bil...

Robert and Chris talk with Hendrik Ewerlin, a threat modeling advocate and trainer. Hendrik believes you can threat model anything, and he r...

Jason Nelson, an accomplished expert in information security management, joins Chris to share insights on establishing successful threat mod...

Erik Cabetas joins Robert and Chris for a thought-provoking discussion about modern software security. They talk about the current state of...

Justin Collins of Gusto joins Robert and Chris for a practical conversation about running security teams in an engineering-minded organizati...

Kyle Kelly joins Chris to explore the wild west of software supply chain security. Kyle, author of the CramHacks newsletter, sheds light on...