App Security Summit

AI is transforming software development at a pace that application security programs were never designed to handle. As enterprises adopt AI-assisted coding tools and expand
cloud-native software supply chains, they're generating more code, more dependencies, and more vulnerabilities — faster than ever. Yet most organizations still rely on fragmented point
tools that produce siloed dashboards, overwhelming alert volumes, and a remediation backlog that never shrinks.

IDC research points to a clear market shift: organizations must move away from "more scanning" toward a continuous, risk-based AppSec approach — one that unifies visibility,
prioritization, and remediation across the entire software development lifecycle. In this session, hear from guest speakers, IDC analyst Katie Norton, Vetcor CSO Andrew
Wilder, and Armis product leaders as they cut through the noise with a practical view of what modern AppSec must deliver.

Key takeaways:

● IDC's view of the emerging attack surface — how AI-assisted coding is reshaping application risk, what leading teams are doing differently, and what "good" looks like in a
continuous AppSec program
● How to prioritize what actually matters — move beyond severity scores to focus remediation on findings that are reachable, exploitable, and tied to real business impact
● A practitioner's perspective from the field — hear how Vetcor's CSO is operationalizing unified AppSec across Git, CI/CD, and production environments
● How to cut noise without cutting corners — reduce tool sprawl, eliminate up to 70% of false positives, and integrate security natively into developer workflows to accelerate
MTTR without slowing releases
● The case for platform consolidation — why replacing fragmented SAST, SCA, IaC, and SBOM tools with a single AI-powered platform reduces cost, improves coverage, and builds trust between security and development teams