We help Application Security teams automate API discovery, inventory, and security testing through agentless scanning. With Escape, quickly inventory all your APIs, detect OWASP Top 10 and complex logic flaws at scale and empower your developers to adopt security in CI/CD

Escape

Mergers and Acquisitions (M\&A) are transformative for businesses, but they can also be a perfect storm for product security issues. With critical assets changing hands, different products and applications being integrated, and compressed timelines, it’s all too easy for security to take a backseat - until it’s too late.

Join our guest experts - Chris Lindsey (Application Security Evangelist at Mend.io), Curtis Koenig (Head of AppSec at Gen), Izar Tarandach (Principal Security Architect at a large entertainment provider) for a practical and insightful conversation about the most common security mistakes in M\&A. This session will cut through the noise to focus on the real-world challenges companies face when merging brands, products, and applications.

We’ll explore:

*   **Data Integration Challenges:** How to securely merge systems and data without leaving gaps that hackers can exploit.
*   **Due Diligence Pitfalls:** Why thorough security audits of a company’s products and applications are crucial – and how to avoid long-term risks from inadequate assessments.
*   **Post-Merger Priorities:** What product and application security leaders should focus on to ensure long-term resilience.
*   **Managing Security Culture Across Teams:** Strategies for addressing differing security practices and ensuring alignment post-merger.

If you often handle M\&A, manage security across diverse brands, or want to avoid common mistakes during major business transitions, this session is for you.

Our goal is to make this webinar highly engaging, so don't be shy! Come and ask your questions via chat! 


The common security mistakes everyone makes in M&A

Application security demands more than just Static or Dynamic testing—true protection comes from combining their strengths. SAST and DAST excel in different areas, and when used together, they deliver the comprehensive coverage needed to secure **modern (!) **applications.

Join our guest experts—Tristan Kalos (CEO & Co-founder, Escape) and Amit Bismut (Head of Product, Backslash Security)—for an engaging discussion on how SAST and DAST work in harmony to create a robust application security program.

We’ll explore:

*   **How SAST and DAST complement each other** by addressing different layers of vulnerabilities, including CWEs.
*   **The importance of combining static and dynamic approaches** to uncover hidden resources like undocumented APIs and shadow assets.
*   **Leveraging both tools for a full inventory** of code resources (e.g., SBOM) and network entities, enabling unmatched governance and security coverage.
*   **Practical strategies** for integrating SAST and DAST into a seamless process within your SDLC.

Whether you’re building your AppSec strategy or refining an existing one, this webinar will provide actionable insights and practical examples to help you achieve stronger security outcomes.

Our goal is to make this webinar highly engaging, so don't be shy! Come and ask your questions via chat! 


The Future of AppSec: SAST + DAST combined for complete application coverage

Are you a security leader struggling to connect meaningfully with your developers? 🤔

Join our guest, **Dustin Lehr**, Senior Director of Platform Security and Deputy CISO at Fivetran and a co-founder at Katilyst Security, for a webinar on the challenges of building relationships with your developers.

During this live discussion, our experts will explore the essential aspects of building strong relationships with developers. They will address common challenges and discuss best practices for fostering effective communication and collaboration:

*   **Earning Developers' Respect**: Discover strategies to gain the respect of developers by understanding their needs and speaking their language.
*   **Introducing Gamification**: Learn how to incorporate gamification into your security initiatives to engage and motivate developers effectively.
*   **Building a Successful Security Champion Program**: Get practical advice on establishing and maintaining a Security Champion program that empowers developers to take ownership of security practices.
*   **Winning Developers Over with Actionable Remediation Advice**: Understand how providing developers with detailed, actionable remediation advice can foster collaboration and enhance security efforts.

If you want to build a great relationship with your development team, this webinar is for you!

Our goal is to make this webinar highly engaging, so don't be shy! Come and ask your questions via chat! 😉


[Webinar] How to Build Relationships With Developers

Join Uri Goldshtein, founder of the Guild, and Tristan Kalos, CEO and co-founder at Escape, for a webinar on the challenges of GraphQL security.

During this live discussion, they will explore the critical aspects of securing GraphQL APIs, addressing common vulnerabilities, sharing their experiences and discussing best practices for ensuring strong security measures. Additionally, Uri and Tristan will share their insights into emerging threats in the GraphQL ecosystem and strategies for mitigating them effectively.

Our goal is to make this webinar highly engaging, so don't be shy! Come and ask your questions via chat! 😉


[Webinar] GraphQL Security

Join Bill Doerrfeld, tech journalist and Editor-in-Chief at the Nordic APIs blog, Erik Wilde, OAI Ambassador at the OpenAPI Initiative, and Antoine Carossio, CTO and co-founder at Escape, for a fireside chat on the challenges of API sprawl.

During this live discussion, they will explore the key factors contributing to API sprawl, examine its causes, and discuss its implications for organizations, security engineers, and developers. They will also share insights on ways to prevent it.

Our goal is to make this panel highly engaging, so don't be shy! Come and ask your questions via chat! 😉


[Fireside Chat] API sprawl: Understanding the growing challenge of 2024 and how to navigate it

Custom rules help you test custom logic of your applications and gain full control of your API security posture.

Join us for our upcoming workshop and gain the insights you need to start writing custom security tests for your APIs. Our experts will guide you through advanced techniques and offer practical insights to improve your security protocols.

In this session, you'll learn:

*   The importance of custom security tests and how to write them
*   Setting up rules for various API vulnerabilities
*   Creating rules based on bug bounty or pentesting reports
*   Fine-tuning Escape rules to catch issues specific to your APIs
*   Ensuring your rules adapt to each API update and newly discovered APIs

By the end of this workshop, you'll have a clear path to establish a robust API security posture for your organization's APIs.

📅 When? 11:00 a.m. EST on Thursday, March 21st.

Can't make it? No worries! Sign up, and you'll receive a session recording once it ends.


Custom Security Tests Workshop

Whether you're in the first few weeks of your ProdSec journey or building your Product security program for 2024, you might feel lost trying to wrap your head around all the attack surface your org faces and identifying some of the biggest security gaps. Don't worry, we're here to help!

Join our upcoming webinar with Product Security expert, James Berthoty, and get insights you need to start building a robust product security roadmap. You'll learn:

*   **The Essentials:** Understand the foundational elements of product security and why they matter.
*   **Risk Assessment:** Identify potential vulnerabilities and threats specific to your organization.
*   **Best Practices:** Discover tried and tested methods for securing your applications effectively.
*   **Compliance and Governance:** Learn how to align your security roadmap with industry standards and regulations.
*   **Incident Response:** Prepare for the unexpected with a well-defined plan for handling security incidents.

By the end of this webinar, you'll have a clear path forward to establish a strong security posture for your organization's products!

📆 When? 9:30a.m. PST on Tuesday, the 28th of November.

Can't make it? No worries, sign up, and you'll receive a session recording once it ends.
