The State of AppSec in the Era of AI [Panel]
summary
Claim: AI pushes AppSec from finding bugs to actually fixing them by running scripted agents that test and apply changes at scale. Evidence: a single business unit shows 37,000 vulnerabilities, most are patch-version-only transitive deps that dependabot and renovate can't fix. Built tools: a platform that maps a customer’s unique code graph, runs agentic fleets to propose and pretest fixes across thousands of repos, and uses deterministic recipes (LSTs, verifiable checks) so changes can be applied without breaking production.
AI-written summary · about
chapters (9)
- 0:00Introduction and panel setup
- 2:10AI’s impact on AppSec landscape
- 9:31Customer reactions to AI in AppSec
- 14:23DevSecOps with AI agents
- 25:53Tooling for secure development
- 30:15AI remediation and agent tools
- 35:36Market shifts and AI partnerships
- 40:36Future bets and partner priorities
- 43:04Closing remarks and Q&A
related talks
40mState of (Absolute) AppSec
13mIntelligence in AppSec: Use AI to supercharge DevSecOps
29mThe vulnerability apocalypse: AI broke the security playbook
38mAppSec is Dead Long Live DevSecOps!
35mManaging the AI Surge: Governing & Scaling in the AI Era
19mIf AI Writes the Code, Who Runs Production?
30mThe AppSec Error Loop: How We Can Stop Repeating Common Security Mistakes
23mVibes Not Vulns: Securing the Era of AI-Written Software