AppSec From the Ground Up
summary
Company grows from two AppSec devs to 19 security staff supporting ~250 developers and a $3B valuation while building concrete systems: a homegrown inventory and dependency scanner called Overlord that turns a two‑day manual CVE hunt into immediate visibility and automated PR checks, a rules‑based behavior engine that scores and blocks account takeover patterns, and a SOC‑style pulse view for triage. Integrations use GitHub and license checks, blockers move out of CI into informative PR gates, and fraud incidents drop after these controls.
AI-written summary · about
chapters (7)
- 0:00Introduction and speaker background
- 5:20Building security program context
- 12:42Establishing credibility in AppSec
- 20:07Developing security capabilities
- 26:13Enabling business while protecting it
- 35:26Handling evolving threats and fraud
- 37:12Q&A and closing remarks
