Ep 61 - Coffee, Chaos, and Absolute AppSec: The State of ProdSec | Q3:26

🎙️ Coffee, Chaos and ProdSec, Ep 61

Q3 ended with PHP on fire and AI agents breaking out of their own test labs.

Somehow security teams are still graded on how many findings they produce.

This week Cameron and Kurt team up with Seth Law and Ken Johnson of Absolute AppSec for the quarterly state of ProdSec. The crew gets into the vuln count value trap and the bug janitor careers it created, where whole teams exist to triage one scanner's output.

From frontier labs locking in boardrooms and absorbing security researchers, to custom source replacing open source and making bug bounties more targeted, the room splits 2v2 between doom and enablement. Kurt calls it the incident response era.

If you work in Product Security, Application Security, Security Architecture, DevSecOps, or Cybersecurity and AI has turned your backlog into pure chaos, you'll feel right at home.

☕ New episodes every Wednesday.

Coffee, Chaos and ProdSec -> strong coffee, stronger opinions