Josh Grossman
where else to find them
no profile links on file
what they talk about
where they keep going back
- NDC Security2 editions2023–2024
on a stage with
never shared a talk
who talks about the same things
- Aram Hovsepyan3 talks
- Spyros Gasteratos6 talks
- Glenn ten Cate3 talks
- Shanni Prutchi3 talks
- Katy Anton8 talks
- Ryan Armstrong3 talks
| title | conference | date |
|---|---|---|
| Tune your Toolbox for Velocity and Value | NDC Security 2024 | 2024-01-09 |
Organization is buried in SAST DAST and SCA results with false positives, no triage and no metrics; fixes focus on tool tuning, inventory and process change… | ||
| Building a sustainable security requirements process with the ASVS | NDC Security 2023 | 2023-01-16 |
Argues for using the OWASP ASVS as a requirements standard but not raw — fork the ASVS and trim it to context so 280 sprawling checks become a focused set… | ||
| ASVS Project | OWASP 2022 Global AppSec Europe Virtual Event | 2022-11-04 |
Comprehensive application-security requirements live in a GitHub repo as Markdown and export to PDF/Word/JSON via scripts, with a master branch for ongoing… | ||
| How to get the best AppSec test of your life | OWASP AppSec USA 2018 | 2018-10-11 |
Opt for a transparent box test: hold a scoping meeting with devs/architects, ask for an example report, and give source access so testers tailor payloads… | ||
| nothing matches | ||