Varun Badhwar -- The Developer Productivity Tax

Varun Badhwar is a three-time founder, a luminary in the cyber security industry, and a clear communicator. He joins Chris and Robert on the Application Security Podcast to discuss scanning with context, SBOM plus VEX, and the developer productivity tax. The concept of a "Developer Productivity Tax" acknowledges the challenges developers face when bombarded with a plethora of vulnerabilities. This "tax" represents the drain on developers' time and resources as they navigate through a myriad of potential threats, many of which lack actionable context. The inefficiencies arising from this process can lead to significant delays in software development, emphasizing the need for more refined tools and techniques.

Connect with Varun Badhwar:
→ Endor Labs
→ The Hard Thing About Hard Things by Ben Horowitz

Mentioned in this episode:
→ Endor Labs
→ The Hard Thing About Hard Things by Ben Horowitz
→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society by Chris Hughes, Tony Turner
→ OWASP Dependency-Track

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Varun Badhwar: The Developer Productivity Tax
02:11 You got to broadcast from wherever you are. So Robert is
05:47 Yeah, very cool. So, let's, let's dive into that. You know
08:39 CVSS. Because I know you've written a lot about CVSS, and
11:51 Whenever I, whenever I hear about reachability, I'm always curious to
15:00 Okay. So, here's another question for you. Uh, we've heard this
19:13 So the perfect state in the future will be a tool
21:06 I mean, I think it's gotta be a hundred percent to
28:52 Yeah, you might as well have a result. You might, you
31:48 There a consolidation coming in our market
35:22 All right. Next question. Uh, what would it say if you
36:40 Cool. Yeah, Tony Turner's a past guest. Chris Hughes is a