Next-Level AppSec: Transforming secure development with Semgrep & Eureka

Forward's highly accomplished team delivers Cybersecurity solutions with focus on application and cloud security to mid-sized organizations in the Finance, Health, E-commerce, and Technology sectors.Our services range from security risk assessment and pentesting, to DevSecOps and training, delivered by a team who has experience with some of world’s largest organizations such as HSBC, Intel, HP, and Motorola all the way to medium sized enterprises and even local start-ups. We work closely with our client’s teams to ensure a successful solution is in place and tackle security using a systematic approach, leveraging standards based and repeatable processes.

Forward Security Inc.

Join industry veterans Farshad Abasi and Tanya Janca in an insightful webinar exploring how to streamline security processes.

SAST, DAST, SCA, ASOC, ASPM, Threat Modelling, what does it all mean? Application security has quickly become a focal point for attackers, and there are many tools and processes that can help reduce the risk for organizations. However, dev teams encounter challenges when faced with the "alphabest soup" of application security. What do you need to secure build secure applications easily and effectively? Join industry veterans Farshad Abasi and Tanya Janca in an insightful webinar exploring the integration of Semgrep's SAST capabilities with the Eureka DevSecOps Platform. This session will dive into the complexities of application security landscapes, including various scanner types and platforms, and demonstrate how integrating these tools can significantly enhance security efficiency and effectiveness.Learn how this synergy not only streamlines security processes but also empowers developers in threat modeling and prioritization. Discover how to optimize your security strategy by leveraging the strengths of each tool, addressing vulnerabilities more effectively, and reducing reliance on security SMEs. Conclusion and Key Takeaways:<ol><li>Insight into the synergy between Semgrep and the Eureka DevSecOps platform and how it enhances security capabilities.</li><li>Strategies for efficient management of multiple security tools and correlation of their findings for a comprehensive security overview.</li><li>An understanding of how the integrated solution was applied in the example use-case for effective application security risk management.</li><li>How this integration enables developers to make informed decisions about security prioritization.</li><li>How the combined use of these tools can reduce the reliance on security SMEs by streamlining security processes.</li></ol> Want more information on this topic and event? Check out <a href="https://forwardsecurity.com/next-level-appsec-transforming-secure-development-with-semgrep-eureka-devsecops-platform/" title="https://forwardsecurity.com/next-level-appsec-transforming-secure-development-with-semgrep-eureka-devsecops-platform/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">our blog post on this topic</a>. Also, check out the <a href="https://www.eurekadevsecops.com/" title="https://www.eurekadevsecops.com/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Eureka DevSecOps</a> and <a href="https://semgrep.dev/" title="https://semgrep.dev/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Semgrep</a> sites for more info on what they can do for your application security and DevSecOps programs!

Agenda

 Farshad Abasi (CEO/Founder, Forward Security)
Tanya Janca (Head of Education and Community, Semgrep)

Introductions

Exploring the complex landscape of security scanners and platforms, including SAST, DAST, SCA, IAST, RASP, SBOM, Secrets, Containers, ASOC, ASPM, and Threat Management.  Discussing the challenges in selecting and managing these tools, correlating results, tracing security requirements from development to deployment.

Overview of the Problem

 Presenting a unified approach to managing different scanners and results.
Highlighting how this integration allows for more effective application risk management by developers using data from both automated and manual sources.

Solution

 Detailing how ACME Corp integrates Semgrep for SAST, and ZAP for DAST.
Demonstrating the process of aggregating and correlating issues, mapping findings to ASVS controls, and focusing remediation on critical areas like Authentication and Session Management.
Explaining the use of threat modeling features for grouping vulnerabilities from all sources, building threat scenarios, and calculating related risks to prioritize remediation efforts.

Use Case

An opportunity for attendees to ask questions and discuss specific topics of interest.

Interactive Q&A Session

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Next-Level AppSec: Transforming secure development with Semgrep & Eureka

More events from Forward Security Inc.

Discover more events from Forward Security Inc., from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.

Next-Level AppSec: Transforming secure development with Semgrep & Eureka

More events from Forward Security Inc.

Discover more events from Forward Security Inc., from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.