Your application is probably vulnerable.

“But how?! We hired a company to pen test our application.

They did a thorough test against the OWASP top 10!”

On this episode of the Virtual CISO podcast, we talk with Daniel Cuthbert. He’s one of the premier authors of the OWASP ASVS, and he says OWASP Top 10 is not enough.

We chat about:

Why the ASVS is so important
Why we shouldn’t be putting all our faith in the OWASP top 10 (only)
How to incorporate threat modelling into your assessments and your ASVS test

свернуть