skinny.

Latest / The Application Security Podcast

Akansha Shukla - Modern AppSec: Securing APIs with Threat Modeling and DevSecOps

APIs power modern applications, yet many AppSec programs still cannot reliably inventory them, model their threats, or enforce authorization. Akansha Shukla draws on more than a decade in application security and DevSecOps to explain why API security remains immature and what practitioners can do about it. She and the hosts examine the OWASP API Security Top 10, broken object-level authorization, API-specific threat modeling, and the role of posture management. The conversation also asks why foundational controls such as input validation remain difficult despite strong framework support, and…

The skinny

The skinny isn't ready yet — notes appear once the transcript is processed.