The Application Security Podcast
The Application Security Podcast is a practitioner-led show for anyone building or securing modern software—and now AI-powered applications. Hosts Chris Romeo and Robert Hurlbut talk with the people shaping application security about AI and LLM security, threat modeling, secure development, OWASP, cloud, DevSecOps, security champions, and building programs that help engineering teams move faster and safer. With more than 300 episodes, the show turns real-world experience into practical guidance for developers, architects, AppSec professionals, and security leaders.
The Application Security Podcast
Latest Episodes
The Cringe Test: Why AI Can't Do Privacy Threat Modeling for You
Can AI do your privacy threat modeling for you? Dr. Kim Wuyts and Avi Douglen say no, and their answer comes down to something AI doesn't have: the cringe. Kim and Avi join Chris Romeo and Robert Hurlbut to introduce Context & Cringe, the c...
AppSec Has Never Mattered More: The Time to Exploit Is Now Negative
When one AI model can find a vulnerability, another can write the exploit, and the gap between discovery and attack is collapsing. Hannah Foxwell, co-founder of BIMP and former product director for Snyk Container, joins Chris Romeo and Robert H...
Your Developers Are Letting AI Answer Your Security Findings
Are your developers still reading their security findings, or are their agents answering for them? Ahmad Sadeddin, founder and CEO of Corgea, brings data from Corgea's customers: replies to security comments written with em dashes jumped from 2...
Shadow MCP Servers: The AI Security Risk Hiding on Your Developers' Laptops
What happens when a protocol goes from idea to everywhere before security can catch up? Vandana Verma Sehgal, leader of the OWASP MCP Top 10, returns to explain why most organizations cannot say how many MCP servers are running on their develop...
Your Opinion on AI Doesn't Matter. Learned Fragility Does
What happens when a tsunami of AI-written code meets a security industry that has spent decades chasing vulnerabilities? Brook S.E. Schoenfield, CTO of Rezliant and author of Securing Systems, returns to warn about "the illusion of omniscient p...
Contributors
Podcasts we love
Check out these other fine podcasts recommended by us, not an algorithm.
AI Security Table
Izar Tarandach, Matt Coles, and Chris Romeo