Chris and Robert -- Introductions and why #AppSec?

In the inaugural episode of the Application Security Podcast, Chris Romeo and Robert Hurlbut introduce themselves, trace the experiences that brought them into security, and establish the question the show will keep answering: what is application security, and why should builders care? They walk through security requirements, threat modeling, secure development, testing, and release as connected parts of the software lifecycle. The conversation distinguishes application security from information security and the broader cybersecurity label, then makes the business case for treating AppSec as foundational work—a customer expectation and a worthwhile investment rather than optional overhead, driven by people and supported by tools.

Connect with Chris and Robert:
→ Chris Romeo on LinkedIn
→ Robert Hurlbut on LinkedIn

Mentioned in this episode:
→ Software Security: Building Security In
→ OWASP Top 10
→ Gary McGraw
→ Robert Hurlbut

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Welcome to the Application Security Podcast
02:21 Chris and Robert’s security origin stories
06:31 Defining application security
09:05 Security requirements in the development lifecycle
10:25 Design and threat modeling
11:17 Secure development and testing
13:35 Release and operational feedback
15:53 Building security in
16:56 Application security vs. information security
20:31 What does cybersecurity mean?
22:59 Why organizations need application security
24:53 Applications as the path to valuable data
27:24 The OWASP Top 10 as a starting point
28:23 Final thoughts and the future of the field