AI Pen Testing Killed Traditional DAST
Is traditional DAST finally dead? James Berthoty came back to settle the argument that his last episode started.
Listen to the episodeStart here by topic
The homepage points you to three episodes listeners actually keep coming back to. This is the other way in: one episode per major subject the show keeps returning to — from the last year where one exists, and the one that actually spends its runtime on the subject rather than the one that merely mentioned it most recently.
Security Testing
90 episodes →Threat Modeling
90 episodes →The Future of Open-Source Threat Modeling
You don't have to let AI do the thinking for you. In this episode, Vikram Narayan shares why the smartest teams use AI as an accelerant — not a replacement…
Listen to the episodeSoftware Supply Chain
59 episodes →José Carlos Chávez - When Museums Get Hacked: OWASP Top 10 Lessons from Heists
Why do broken access control and injection still dominate the OWASP Top 10 despite years of mature tooling?
Listen to the episodeVulnerabilities and Exploits
54 episodes →Vulnerability Jail and the AI-Era AppSec Engineer
Three years ago, Jeevan Singh mapped out what an application security engineer needed to know. AI has rewritten the job since.
Listen to the episodeOWASP Projects
46 episodes →OWASP Candidate Debate - 2025 Edition
What should OWASP become, and which leaders have a credible plan to get it there? In this special 2025 Board of Directors candidate debate, nine candidates…
Listen to the episodeDevSecOps and CI/CD
45 episodes →Alyssa Miller -- Bringing security to DevOps and the CI/CD pipeline
Alyssa Miller is a life-long hacker, security advocate, and cybersecurity leader. She is the BISO for S&P Global ratings and has over 15 years of experience in security roles.
Listen to the episodeWant the full picture on a subject rather than just an entry point? Every topic page lists every episode that spends real time there — see all topics.