Legit Security

Liav Headshot – Legit Security v2

<body>
<p>Getting AppSec Right: Traceability and Security from Code to Cloud  <br>  <br>Organizations want to deliver secure applications quickly, but rapidly changing and increasingly complex development environments make it difficult to find, prioritize and fix application vulnerabilities. Further, when AppSec teams discover security issues, they lack enough context and traceability from code to cloud to prioritize the most business-critical issues or collaborate efficiently with development teams to rapidly remediate.   <br>  <br>This lack of context and traceability means more security issue noise, inefficient dev and security remediation processes, insufficient protection against software supply chain attacks, and insecure code releases.  <br><br>Code-to-cloud traceability provides security teams with a two-way street to trace vulnerabilities from dev environments to production, and also from the production environment back to the origin of the vulnerably in your upstream development environment.  <br>  <br>In this webinar, Liav Caspi, Legit Security CTO and John Tierney, Legit Security Field CTO, will share how to:  <br>  </p>



<ul class="wp-block-list">
<li>Gain visibility into your application pipelines from source code to deployment  </li>



<li>Leverage code-to-cloud traceability to identify security issues and map them back to their source for fast and efficient remediation  </li>



<li>Gain contextual threat prioritization for efficient remediation and effective collaboration with dev teams   </li>



<li>Build security into your CI/CD pipelines to ensure secure application delivery at scale  </li>
</ul>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2023/04/LiavCaspi_813.jpg" alt="Speaker"></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Liav Caspi</p><p class="speaker-job">CTO</p><p class="speaker-company">Legit Security</p></div><div class="speaker-description"><p>Liav Caspi is CTO of Legit Security and has a long background as a cyber-security expert starting in the Israeli unit of 8200 in various engineering, team lead, and project management roles. In previous roles, Liav worked at Argus Cyber Security building security into automotive-oriented software. He then joined an early-stage startup that was acquired by Checkmarx and led the architecture and the product management of the SCA solution – the first SaaS solution by Checkmarx dealing with open source security. In his free time, Liav enjoys technology, traveling, food, and learning new languages.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2023/04/jt-head-shot.jpeg" alt="Speaker"></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">John Tierney</p><p class="speaker-job">Field CTO</p><p class="speaker-company">Legit Security</p></div><div class="speaker-description"><p>John is an accomplished technologist with expertise in digital transformation and cybersecurity with a passion for delivering dynamic customer experiences through innovative and disruptive technologies. John has spent the last 25+ years as a strategic advisor to Fortune 100 organizations while working for F5, Microsoft, Palo Alto Networks and now for Legit Security, where he serves as Field CTO. John is a graduate of University of Wisconsin – Milwaukee where he received a B.A. in Economics &amp; Business.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/05/bradley_barth_head_shot-0.jpeg" alt="Speaker"></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Bradley Bart</p><p class="speaker-job">Director of Community Content</p><p class="speaker-company">CyberRisk Alliance</p></div><div class="speaker-description"><p>As director of community content at CyberRisk Alliance, Bradley Barth develops content for SC Media online conferences and events, as well as video/multimedia projects. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.</p></div></div></div></div>



<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="300" height="150" src="https://www.scworld.com/wp-content/uploads/2023/04/300x150-full-logo-1.png" alt="" class="wp-image-480962"></figure>
</body>

Application security

Cybercast

Archived: Getting AppSec Right: Traceability and Security from Code to Cloud

<body>
<p><strong>Attendees will learn:</strong></p>


<ul>
<li>Actionable strategies for leveraging AI to enhance application security</li>
<li>Techniques to identify and rectify common security flaws in applications</li>
<li><span data-teams="true">Steps to implement best practices that improve your security posture</span></li>
</ul>


<p>As cyberattacks grow more sophisticated, traditional application security approaches are no longer enough. The latest advancements in AI offer a game-changing opportunity to outpace attackers by proactively identifying and neutralizing vulnerabilities before they can be exploited. Discover how AI is revolutionizing the way organizations approach application security by automating vulnerability detection, reducing time-to-remediation, and enhancing overall system integrity.</p>



<p>Join us to gain the critical knowledge you need to safeguard your organization from evolving threats while earning CPE credits. Register today to enhance your organization’s security posture!</p>
</body>

<p><strong>In this Hot Topics webcast, we will explore:</strong></p>
<ul>
<li>The current challenges in application security and their implications for organizations</li>
<li>Why traditional security measures fall short in today&#8217;s threat environment</li>
<li>The role of AI in identifying and mitigating application vulnerabilities</li>
<li>Effective tools and methodologies for integrating AI into your security strategy</li>
<li>Best practices for fostering a culture of security across development and operations teams</li>
</ul>


Archived: Application Security 2.0: AI changes everything

<body>
<p>Organizations are charging heedlessly into AI-driven code generation without understanding the risks. They don’t know which models their developers are using, where MCP servers are being used, or even which pieces of their own code are AI-generated — or imported from elsewhere.</p>



<p>Development teams may not realize that AI coding agents must be protected from prompt injection, data poisoning or other external influences. Legacy AppSec tools often can’t properly analyze AI-generated code, and security teams have scant visibility into the choices made by “black box” AI models.</p>



<p>We’ll examine new ways to scan, test and secure both AI-coded applications and the agents that create them.</p>
</body>

<p><strong>In this discussion, you&#8217;ll learn:</strong></p>
<ul>
<li>How to determine which elements of your code are AI-generated</li>
<li>How to analyze and secure AI-written code without holding up development</li>
<li>How to use AIBOM tools and markers to gain visibility into AI coding agents</li>
</ul>
