Latest / The Application Security Podcast

Your Developers Are Letting AI Answer Your Security Findings
Are your developers still reading their security findings, or are their agents answering for them? Ahmad Sadeddin, founder and CEO of Corgea, brings data from Corgea's customers: replies to security comments written with em dashes jumped from 2.5 percent in May to about a third, and once long, verbose replies are counted, somewhere between 35 and 60 percent come from agents. Chris and Ahmad dig into developers using agents to wave off findings as false positives, why commits per PR keep climbing, and what Ahmad calls headless AppSec, where agents review, triage, and fix for other agents. They…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.