Akansha Shukla - Modern AppSec: Securing APIs with Threat Modeling and DevSecOps

Our guest today is Akansha Shukla, an information security professional with over 10 years of experience in application security, DevSecOps, and API security. We’re discussing why API security remains one of the least mature areas of AppSec today and exploring the challenges developers face when securing APIs. Akansha shares her insights on incorporating APIs into threat modeling exercises, the ongoing struggles with API discovery and inventory management, and the authorization challenges highlighted in the OWASP API Security Top 10. The conversation also touches on whether "shift left" is truly dead and why we still haven't solved basic security problems like input validation despite having the frameworks to address them. FOLLOW OUR SOCIAL MEDIA: ➜Twitter: @AppSecPodcast ➜LinkedIn: The Application Security Podcast ➜YouTube: Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

You can listen to Akansha Shukla - Modern AppSec: Securing APIs with Threat Modeling and DevSecOps online on Radio and Podcast. Open the player on this page to stream the available audio.

Akansha Shukla - Modern AppSec: Securing APIs with Threat Modeling and DevSecOps is an episode from Application Security PodCast by Chris Romeo and Robert Hurlbut.

This episode is 35:35 long.

This episode was published on Sep 2, 2025.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Application Security PodCast when more episodes are available from the podcast feed.