Archived: Dr. DevSecOps: A prescription for alleviating AppSec’s biggest pain points

Secure application development can be a painstaking process, but just how painful does DevSecOps actually need to be?

Companies that are actively engaged in DevSecOps speak of multiple pain points, from struggles with asset visibility and discovery to finding ways to close every gap in their defenses. Along the way, they face an uphill battle to integrate dynamic application security testing (DAST) into their software development life cycle and maintain vulnerability testing coverage across all their application environments – and all this while constantly warding off time-wasting false positives.

Organizations are always looking for ways to ease these security pains and cut down on inefficiencies. One remedy for these ailments is Invicti’s web application security testing platform, which integrates throughout the SDLC to embed automated security testing into application development without hampering the pace of innovation.

This democast will feature a walkthrough of Invicti’s AppSec solution, with detailed commentary explaining how Invicti’s Proof-Based Scanning technology coupled with deep integration into CI/CD workflows provides a tried-and-true remedy for the biggest pain points that plague DevSecOps initiatives today.

Ryan Bergquist

Solutions Engineering Manager

Invicti

Ryan has more than 6 years experience in the cybersecurity industry with extensive knowledge in security engineering and product management. He is passionate about cybersecurity, computer forensics and security, and information technology in general.

Jill Aitoro

Senior Vice President of Content Strategy

CyberRisk Alliance

Jill Aitoro is senior vice president of content strategy for CyberRisk Alliance. She has more than 20 years of experience editing and reporting on technology, business and policy. Prior to joining CRA, she worked at Sightline Media as editor of Defense News and executive editor of the Business-to-Government Group. She previously worked at Washington Business Journal and Nextgov, covering federal technology, contracting and policy, as well as CMP Media’s VARBusiness and CRN and Penton Media’s iSeries News.