Interested in seeing how even an experienced developer sometimes falls short in the real world? In this talk, you'll learn, laugh and cry at all the ways a professional developer screwed up while building real-world web applications and what he learned along the way.

Familiar with the OWASP Top 10 but looking to go further to keep your applications secure? Are you confident your developers are remediating 2022's most common open source security vulnerabilities? Stay on top of the most recent and impactful open source vulnerabilities with the Snyk Top 10.

In this webinar, you'll learn how to:

• Stay ahead of AppSec risk by addressing these 10 top critical vulnerabilities.
• Identify the most recent and impactful open source vulnerabilities so your AppSec teams can defend against them.
• Know which threats to prioritize to mitigate risks to your applications.

In this workshop, you will scan and deploy an infrastructure-as-code (IaC) project to AWS using Snyk and HashiCorp terraform. We’ll then use the CLI and web interfaces for these solutions to identify and fix issues.

Be sure sign up for a free Snyk and Hashicorp Terraform Cloud account to participate in this session

• Snyk Account
• Hashicorp Terraform Cloud Account

In this workshop, we’ll guide you through implementing security best-practices early on in your developer workflow to build an automated and secure CI/CD pipeline and scan your app workloads for open source vulnerabilities.

Be sure sign up for a free Snyk and Atlassian Bitbucket account to participate in this session

• Snyk Account
• Atlassian Bitbucket account

During this session, you will hear from Acuity’s Director of Engineering, Sameer Goyal, a Snyk customer. Sameer will share his own personal experience of what it was like to transition to a technology-first mindset, how Acuity prioritized application security and the importance of a tool that could be integrated seamlessly into its development pipeline, and the value that they have seen from doing so.

Security programs have undergone major changes in recent years to adapt to the changes that Agile development, DevOps pipelines and faster deployments bring. New DevSecOps programs and models have resulted in a significant security ownership shift to the development teams. But in order for development teams to truly take responsibility for security, they need to embrace and adopt the new security practices. This is no easy feat! It introduces many organizational, process and tooling challenges. In this session, we will discuss how others have successfully achieved this and talk about tips and best practices for improving developer adoption of your security needs as well as common pitfalls and problems to avoid.