The Application Security Podcast
The Application Security Podcast is a practitioner-led show for anyone building or securing modern software—and now AI-powered applications. Hosts Chris Romeo and Robert Hurlbut talk with the people shaping application security about AI and LLM security, threat modeling, secure development, OWASP, cloud, DevSecOps, security champions, and building programs that help engineering teams move faster and safer. With more than 300 episodes, the show turns real-world experience into practical guidance for developers, architects, AppSec professionals, and security leaders.
The Application Security Podcast
Simon Gibbs & Devika Gibbs -- Building Bridges with Games
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
Security education often struggles because the people in the room are being talked at instead of invited to participate. Simon and Devika Gibbs, the duo behind CyberSec Games, explain how tabletop games can turn abstract security concepts into shared experiences that connect developers, security practitioners, and business teams. They trace their path from agile stationery into threat-modeling games, describe what they learned from Elevation of Privilege and OWASP Cornucopia, and discuss the community that helped shape their work. The pair also introduce the Cybersecurity Game Challenge, including who can enter, how ideas are judged, and what winning makes possible. Their larger argument is simple: play lowers barriers, creates conversation, and can make difficult security lessons memorable enough to change behavior.
Today's episode is brought to you by Security Journey.
About Security Journey
Our education platform teaches valuable secure coding skills based on real-world vulnerabilities and threats, including the OWASP Top 10.
→ Learn more about Security Journey
Connect with Simon and Devika Gibbs:
→ Simon Gibbs on LinkedIn
→ Devika Gibbs on LinkedIn
→ CyberSec Games
Mentioned in this episode:
→ CyberSec Games
→ Cybersecurity Game Challenge
→ Elevation of Privilege
→ OWASP Cornucopia
→ Threat Modeling Manifesto
→ Adam Shostack
→ EU Cyber Resilience Act
Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook
Chapters:
00:00 Meet Simon and Devika Gibbs
02:39 From business analysis to game design
05:36 Printing the Threat Modeling Manifesto
06:27 What is CyberSec Games?
08:38 Games bring people together
11:13 A welcome from the security community
14:34 Building bridges across disciplines
18:00 Discovering Elevation of Privilege
19:35 The return on a simple card deck
22:45 How popular are security games?
26:21 The Cybersecurity Game Challenge
28:43 Judges and community contributors
30:33 What can the winner receive?
32:12 A future security-game reality show
33:29 How and when to enter
35:07 The audience homework assignment
Follow the Application Security Podcast:
➜ Home: appsecpodcast.com
➜ X: @AppSecPodcast
➜ LinkedIn: The Application Security Podcast
➜ YouTube: @ApplicationSecurityPodcast
➜ Instagram: @appsecpodcast
➜ Facebook: Application Security Podcast
People on this episode
Podcasts we love
Check out these other fine podcasts recommended by us, not an algorithm.
The Security Table
Izar Tarandach, Matt Coles, and Chris Romeo