Going beyond AppSec integration, correlation, and orchestration
summary
Apiiro builds a code-aware ASPM that pulls read-only from source control, maps APIs, dependencies, data models and ownership into a risk graph within 30–60 minutes, correlates SCA/SAST/container/CI alerts into single work items, and runs built-in SAST, secrets and API tests alongside third‑party integrations. It adds a risk control plane to block PRs or pipelines that violate policies and claims to reduce backlogs by 80–90%, save roughly 65 hours (≈ eight developers) and drastically cut Log4J MTTR.
AI-written summary · about
chapters (10)
- 0:00Introduction to ASPM
- 0:31Evolution of application security
- 2:03The importance of context
- 4:06Gartner's ASPM framework
- 5:39The Apiiro platform approach
- 7:06Beyond classic ASPM
- 8:27Case study results
- 9:09Platform dashboard demo
- 10:21Deep dive into alert triage
- 12:27Risk graph query capabilities
related talks
42mAPI Security: Code-to-Cloud Context for Complete Protection
24mAPI Security in DevSecOps: Built-In, Not Bolted On
48mAppSec++ Take the best of Agile, DevOps and CI/CD into your AppSec Program
33mWhy Developers Struggle with API Security
43mJumpstarting Your DevSecOps Pipeline with IAST and RASP
16mApisecure, 14 & 15 March 2023 - Meenakshi Kaushik, Leader - Product Management at Cisco.
33mImproving API Security Posture.
01h 06mApisecure, 14 & 15 March 2023 - Christine Bevilacqua, Head Of Marketing at APIsec.