Season 5 Finale — A cross section of #AppSec

Season 5 covered application security from tools and threat models to mentoring, self-care, coaching, dependency risk, and program design. Chris and Robert revisit the guests whose explanations best captured that range. Simon Bennetts introduces the ZAP Heads Up Display, Izar Tarandach explains pytm, Tanya Janca and Nancy Gariché discuss mentoring, Björn Kimminich presents Juice Shop, Caroline Wong addresses self-care, Adam Shostack examines the human layer of threat modeling, Matt McGrath defines security coaching, Steve Springett explains Dependency-Track, and Ronnie Flathers describes building sustainable programs. Organized as guest-level chapters, the finale works as a guide to the season and a reminder that effective AppSec combines technical capability with community, learning, and organizational change.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Security Journey provides application security education for developers and everyone in the software development lifecycle.
→ Learn more about Security Journey

Connect with Chris Romeo and Robert Hurlbut:
→ Chris Romeo on LinkedIn
→ Robert Hurlbut on LinkedIn

Mentioned in this episode:
→ OWASP ZAP
→ ZAP Heads Up Display (HUD)
→ pytm
→ OWASP Juice Shop
→ Dependency-Track
→ Sonatype OSS Index
→ SPDX
→ #CyberMentoringMonday
→ OWASP Juice Shop

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Season 5 highlights
02:46 Simon Bennetts on the ZAP HUD
04:50 Izar Tarandach on pytm
07:32 Tanya Janca and Nancy Gariché on mentoring
11:29 Björn Kimminich on OWASP Juice Shop
15:43 Caroline Wong on self-care in security
18:00 Adam Shostack on threat modeling’s human layer
20:54 Matt McGrath on security coaching
24:06 Steve Springett on Dependency-Track
28:22 Brook Schoenfield on security architecture
31:12 Ronnie Flathers on building AppSec programs
35:28 Closing Season 5