Get your ticket or log in to build your agenda.

OPEN TALK: Developer-First DAST: The Missing Tool in Your AppSec Toolkit


Oliver Moradov
NeuraLegion, VP

Oli is VP of NeuraLegion's developer focussed security testing platform, helping developers understand how they can run seamless, fast and accurate security tests on every build.Oli works closely with security and engineering teams globally to help them ship secure software more efficiently and is passionate about automation, CI/CD and DevOps / DevSecOps.Oli has has spoken at many conferences internationally, has given OWASP training around AppSec and DevSecOps and is a regular at developer and security related events and meetups.


To truly scale application security testing, developers need to maintain their role in the security process beyond SCA and SAST, continuing the automation you are already achieving and rely less on manual testing.

Traditional DAST scanners are a blocker to this automation. They are hard to use, impossible to integrate, not developer friendly and produce too many false positives. This results in crippling human bottlenecks that stifle CI/CD, whether it's the need for security to constantly tweak scanners or the drain of manually validating vulnerabilities.

Either way, technical and security debt is compounded, resulting in insecure product hitting production. Change is needed, and fast.

In this session with you will discover:

1. Key features that your dev-first DAST needs to enable developers to take ownership of security

2. How you can detect, prioritise and remediate security issues early, automated in the pipeline

3. Insights into reducing the noise of false alerts to remove your manual bottlenecks to shift left

4. Steps you can take to achieve security testing automation as part of your CI/CD, to test your applications and APIs.