Fix What You Find With Developer Engagement

Presented by

John Smith | Director, Solution Architects at Veracode

About this talk

AppSec programs fail when developers are not engaged or empowered to fix vulnerabilities and security teams are only incentivized to find vulnerabilities but not to fix them. Too often, security teams dictate rather than partner with development teams and have unrealistic expectations. The result is a strained relationship between security and development. Join this session to learn: •How to help developers fix the security findings •How to work with developers to reduce the introduction of new security flaws •How to develop a security champions program

Related topics:

More from this channel

Upcoming talks (3)
On-demand talks (391)
Subscribers (31005)
Veracode is intelligent software security. The Veracode Software Security Platform continuously finds flaws and vulnerabilities at every stage of the modern software development lifecycle. Prompted by powerful AI trained by trillions of lines of code, Veracode customers fix flaws faster with high accuracy. Trusted by security teams, developers, and business leaders from thousands of the world’s leading organizations, Veracode is the pioneer, continuing to redefine what intelligent software security means. Learn more at