Matt Tesauro
where else to find them
linkedin:matttesauro
what they talk about
all 4 in the filters
where they keep going back
no series more than once — all 13 in the filters
on a stage with
all 11 in the filters
who talks about the same things
- Aaron Weaver6 talks
- Tanya Janca30 talks
- Jeff Williams13 talks
- James Wickett14 talks
- Jeroen Willemsen8 talks
- Jim Manico28 talks
| title | conference | date |
|---|---|---|
| OWASP DefectDojo | OWASP Global AppSec San Francisco 2024 | 2024-09-23 |
DefectDojo is an open source AppSec platform that aggregates 180+ scanner parsers and exposes a REST‑based API, normalizing and de‑duping findings, grouping… | ||
| DefectDojo | Global AppSec Lisbon 2024 | 2024-06-24 |
DefectDojo takes noisy outputs from scanners and normalizes, deduplicates and tracks them via a REST API and a SaaS offering, ingesting results from 179 tool… | ||
| Hacking And Defending APIs: Red And Blue Make Purple | Global AppSec Dublin 2023 | 2023-02-15 |
A practical run‑through of an API pentest that names tools and tradeoffs: passive recon, active discovery with local proxies and bruteforcers like Kite Runner… | ||
| Closing Ceremony | Global AppSec Dublin 2023 | 2023-02-15 |
OWASP announces a formal name change to Open Worldwide Application Security Project and confirms conference logistics: seven board members, active volunteers… | ||
| Landmines in the API Landscape | OWASP 2022 Global AppSec Europe Virtual Event | 2022-11-04 |
Claim: APIs become the top attack vector (Gartner) because surface, controls and tooling lag. Walks through the OWASP API Top 10 with concrete attack patterns… | ||
| Are you safe from OWASP #11? | Global AppSec US 2021 Virtual | 2021-11-08 |
Claims that OWASP Top 10 is a starting point not a ceiling and that many real failures live in the “#11” beyond it: a pen test finds a 12 minute outage from a… | ||
| Flagship Projects: DefectDojo | OWASP 20th Anniversary 2021 | 2021-09-24 |
OWASP DefectDojo claims to consolidate and dedupe findings from many scanners and it actually ingests 100+ tool parsers into a Django/Python backend with a… | ||
| OWASP Leaders Workshop AppSecUSA 2018 - Part 1 | OWASP AppSec USA 2018 | 2018-10-11 |
Covers concrete governance and ops details: chapter and project counts (228 chapters, 110 projects), how revenue splits and surpluses work (90/10 regional… | ||
| OWASP Leaders Workshop AppSecUSA 2018 - Part 2 | OWASP AppSec USA 2018 | 2018-10-11 |
Proposes concrete fixes: revive chapter and project committees and pick measurable chapter metrics (meeting frequency, paid members versus walk‑ins) and add… | ||
| Making Continuous Security a Reality with OWASP’s AppSec Pipeline | OWASP AppSec Europe 2018 | 2018-07-02 |
Practical demonstration of an implemented pipeline that runs prebuilt docker containers for static and dynamic checks, pushes normalized results into OWASP… | ||
| AppSec++ Take the best of Agile, DevOps and CI/CD into your AppSec Program | AppSecUSA 2016 | 2016-10-11 |
Adopts CI/CD ideas into AppSec with concrete results: pipeline architecture (intake → triage → parallel testing → vulnerability repo → Jira) that automates… | ||
| Taking AppSec to 11: Pipelines, DevOps and making things better | OWASP AppSec California 2016 | 2016-01-25 |
Claims a practical pipeline that raises yearly assessments from ~44 to ~200 while losing ~3.5 staff and peaking at a 12‑person team, using automation and… | ||
| Interview with | Velocity Conference New York 2015 | 2015-09-28 |
AppSec now covers web, APIs and IoT and focuses on keeping company data private and avoiding breaches; typical staffing is tiny—ops to dev ~2:1 and 100 to 1… | ||
| Lessons From DevOps: Taking DevOps Practices Into Your AppSec Life | OWASP AppSec Research (AppSecEU) 2015 | 2015-05-19 |
Claims a DevOps-style appsec pipeline is practical not just aspirational it wires repo commits, unit tests, scanners and manual work into an automated flow… | ||
| Ground Truths of a Rugged DevOps Practitioner | OWASP AppSecUSA 2014 | 2014-09-16 |
Draws on Rackspace operations to argue traditional week‑long security windows are gone — one team averages 75 deploys/week — and replaces them with automated… | ||
| 11,000 Voices: Experts Shed Light on 4-Year Open Source & AppSec Survey | OWASP AppSecUSA 2014 | 2014-09-16 |
Four-year survey covers 3,300 responses in April 2014 (11,000 total to date) and delivers hard numbers: 75% of organizations don’t enforce open-source… | ||
| nothing matches | ||