The Future of AppSec: SAST + DAST combined for complete application coverage
Starts in
2 speakers
The Future of AppSec: SAST + DAST combined for complete application coverage
About
Application security demands more than just Static or Dynamic testing—true protection comes from combining their strengths. SAST and DAST excel in different areas, and when used together, they deliver the comprehensive coverage needed to secure **modern (!) **applications.
Join our guest experts—Tristan Kalos (CEO & Co-founder, Escape) and Amit Bismut (Head of Product, Backslash Security)—for an engaging discussion on how SAST and DAST work in harmony to create a robust application security program.
We’ll explore:
- How SAST and DAST complement each other by addressing different layers of vulnerabilities, including CWEs.
- The importance of combining static and dynamic approaches to uncover hidden resources like undocumented APIs and shadow assets.
- Leveraging both tools for a full inventory of code resources (e.g., SBOM) and network entities, enabling unmatched governance and security coverage.
- Practical strategies for integrating SAST and DAST into a seamless process within your SDLC.
Whether you’re building your AppSec strategy or refining an existing one, this webinar will provide actionable insights and practical examples to help you achieve stronger security outcomes.
Our goal is to make this webinar highly engaging, so don't be shy! Come and ask your questions via chat!
Speakers
Amit Bismut
Head of Product @ Backslash Security
Amit Bismut is the Head of Product Management at Backslash Security, leveraging extensive cybersecurity experience. Amit's focus is on cloud and application security, having held previous product management roles at Aqua Security and Radware. In his spare time, Amit enjoys playing the guitar, spending time with his family, and baking.
Tristan Kalos
CEO @ Escape
Tristan Kalos, co-founder and CEO at Escape, draws from a background as a software engineer and Machine Learning Researcher at UC Berkeley. Motivated by firsthand experience witnessing a client’s database stolen through an API in 2018, he has since become an expert in API security, helping security engineers and developers worldwide building secure applications. He is an experienced keynote and conference speaker, presenting at Forum InCyber, Platform Summit, APIdays, GraphQL conf, and other international software development and cyber security conferences.
