I still hold the maybe unpopular opinion that WAF products have done more damage to AppSec than they actually help, more times than not they are used as a "we don't need to fix it we have WAF" and not as another layer of security approach. WAF bypass is a daily occurrence

Current security testing is slow, creates bottlenecks, and delays releases...It doesn't have to be that way. Learn about integrating security into unit testing for @JavaScript by signing up for our FREE upcoming workshop with @theakirati! Sign up below! bit.ly/3m76QnO

Join Bright on Tuesday, June 7th for The Fab 5 RSA Cocktail Party with Wiz, @snyksec, @SaltSecurity, and @blubracket! If you are interested in attending the event, fill in the form below to request and invitation! bit.ly/3lIyR4Q

🔈BIG ANNOUNCEMENT! We're thrilled to announce our $20 million Series A, led by @EvolutionEquity along with investors @dnxventures, @FusionFundVC, @JVentures1 & @IncubateFund. The future is so bright, that we changed our name to Bright Security!💡 #appsec #devops #infosec

Other scanners: "/graphql ? yeha there is a JSON schema...maybe?" @NeuraLegion Scanner: "hold my beer" This is indeed 68671 Parameters parsed, so, 68k.

NeuraLegion's @AppSecOli on a panel discussion @testjssummit, talking about how it's impossible to prioritise remediation without accurate security tests. False positives cripple your CICD...remove bottlenecks and security debt with our DAST scanner for devs #testjssummit