--- title: Application Security for Transformational Product Companies --- [![nopsec\_primary\_logo-black](https://resources.nopsec.com/hs-fs/hubfs/Images/Logos/nopsec_primary_logo-black.png?width=215&height=78&name=nopsec_primary_logo-black.png) ![nopsec\_primary\_logo-black](https://resources.nopsec.com/hs-fs/hubfs/Images/Logos/nopsec_primary_logo-black.png?width=215&height=78&name=nopsec_primary_logo-black.png)](https://www.nopsec.com) [![nopsec\_primary\_logo-black](https://resources.nopsec.com/hs-fs/hubfs/Images/Logos/nopsec_primary_logo-black.png?width=215&height=78&name=nopsec_primary_logo-black.png)](https://www.nopsec.com) - [CTEM Platform](https://www.nopsec.com/platform/) - [Platform](https://www.nopsec.com/platform/) - [Aggregate](https://www.nopsec.com/discover/) - [Prioritize](https://www.nopsec.com/prioritize/) - [Operationalize](https://www.nopsec.com/remediate/) - [Validate](https://www.nopsec.com/simulate/) - [Insights](https://www.nopsec.com/measure/) - [Agentic AI Pen Test](https://www.nopsec.com/resources/adversarial-emulation/continuous-adversarial-emulation/) - [Services](https://www.nopsec.com/our-services/) - [Managed Vulnerability Management](https://www.nopsec.com/our-services/managed-vulnerability-management/) - [Penetration Testing](https://www.nopsec.com/our-services/penetration-testing/) - [JumpStart Program for Kenna Customers](https://www.nopsec.com/resources/jumpstart-program/nopsec-jumpstart-for-cisco-kenna-customers/) - [Resources](https://www.nopsec.com/resources/) - [Blog](https://www.nopsec.com/blog/) - [Webinars](https://www.nopsec.com/resources/#webinars) - [Case Studies](https://www.nopsec.com/resources/#case-studies) - [White Papers & eBooks](https://www.nopsec.com/resources/#whitepapers-ebooks) - [Data Sheets](https://www.nopsec.com/resources/#data-sheets) - [Just in Time Bulletins](https://www.nopsec.com/resources/#just-in-time) - [Knowledge Base](https://help.nopsec.com/hc/en-us?hsLang=en) - [CTEM Platform](https://www.nopsec.com/platform/) - [CTEM Platform](https://www.nopsec.com/platform/) - [Platform](https://www.nopsec.com/platform/) - [Aggregate](https://www.nopsec.com/discover/) - [Prioritize](https://www.nopsec.com/prioritize/) - [Operationalize](https://www.nopsec.com/remediate/) - [Validate](https://www.nopsec.com/simulate/) - [Insights](https://www.nopsec.com/measure/) - [Agentic AI Pen Test](https://www.nopsec.com/resources/adversarial-emulation/continuous-adversarial-emulation/) - [Services](https://www.nopsec.com/our-services/) - [Services](https://www.nopsec.com/our-services/) - [Managed Vulnerability Management](https://www.nopsec.com/our-services/managed-vulnerability-management/) - [Penetration Testing](https://www.nopsec.com/our-services/penetration-testing/) - [JumpStart Program for Kenna Customers](https://www.nopsec.com/resources/jumpstart-program/nopsec-jumpstart-for-cisco-kenna-customers/) - [Resources](https://www.nopsec.com/resources/) - [Resources](https://www.nopsec.com/resources/) - [Blog](https://www.nopsec.com/blog/) - [Webinars](https://www.nopsec.com/resources/#webinars) - [Case Studies](https://www.nopsec.com/resources/#case-studies) - [White Papers & eBooks](https://www.nopsec.com/resources/#whitepapers-ebooks) - [Data Sheets](https://www.nopsec.com/resources/#data-sheets) - [Just in Time Bulletins](https://www.nopsec.com/resources/#just-in-time) - [Knowledge Base](https://help.nopsec.com/hc/en-us?hsLang=en) [![Schedule a Demo Call to Action](https://no-cache.hubspot.com/cta/default/20334580/f214f44d-4d1d-4ca2-b138-3f8202de9650.png)](https://cta-redirect.hubspot.com/cta/redirect/20334580/f214f44d-4d1d-4ca2-b138-3f8202de9650) ## Application Security for Transformational Product Companies AppSec Is Growing Up. Are We? Vulnerabilities aren’t going away. AI is changing the game. And security teams are stuck juggling legacy code, cloud sprawl, and compliance. NopSec recently hosted a **fireside chat** with: - **Henry Jiang**, CISO at Ensora Health - **Shawn Evans**, Head of Security Research at NopSec - Moderated by **Rob Johnson** What started as a panel quickly became a candid discussion about what’s working in AppSec—and what’s clearly not. #### 💥 Key Takeaways: - We’re still battling the **same old flaws**—like injection and misconfigurations. - Teams are **overwhelmed**, and priorities are often **unclear**. - Even with modern tooling, **operational gaps** are the real bottleneck. > “You’ve got tools that show you how to fix issues—and some even fix them for you. > But people aren’t using them. It’s not a tech issue anymore—it’s operational.” > — **Henry Jiang** #### 🔓 Hidden Threats: Shawn Evans highlighted a major blind spot: > “It’s rarely your app that gets breached. > It’s the outdated library, the untracked dependency, the forgotten system.”   #### 🤖 **The AI Factor** AI was front and center. Henry shared how AI is helping teams **analyze code**, **flag bugs**, and even **suggest fixes**—but also warned that attackers are using the same tools. > “AI-generated phishing emails look **shockingly real**. > But it’s also caught bugs and generated perfect fixes in seconds. > It’s not magic—it’s just powerful.” — **Henry Jiang** #### 🏗️ **Automation ≠ Governance** Rob Johnson reminded everyone that automation won’t fix broken fundamentals: > “You can’t automate your way out of a bad structure. > Know what data AI is touching. > Know who’s accountable. Otherwise, you're just scaling your blind spots.” #### 🌐 **It’s All Connected** AppSec now touches everything: - Code - Cloud infrastructure - Identity & access - Third-party integrations - And yes—people. > “You can’t just secure the code anymore. > You’ve got to secure **how it’s built, how it’s deployed, and who’s managing it.**” > — **Shawn Evans** #### ✅ Final Thought The future of AppSec is **proactive**, **automated**, and **holistic**—but it still relies on doing the basics right. 📺 **Watch the full conversation above** to hear more insights (and a few war stories too).   ![Customer Bar Small](https://resources.nopsec.com/hs-fs/hubfs/Images/Landing%20Page%20Images/Customer%20Bar%20Small.png?width=900&height=43&name=Customer%20Bar%20Small.png "Customer Bar Small") ## Schedule a Product Demo Today! See how NopSec's end-to-end Cyber Exposure Management platform can organize your security chaos. [![Schedule a Demo CTA](https://no-cache.hubspot.com/cta/default/20334580/7d649357-4eb4-428e-91ab-995954390400.png)](https://cta-redirect.hubspot.com/cta/redirect/20334580/7d649357-4eb4-428e-91ab-995954390400) ©2026 NopSec Copyright. All rights reserved. [Privacy Policy](https://www.nopsec.com/privacy/) ```json { "@context" : "https://schema.org", "@type" : "VideoObject", "contentUrl" : "https://stream.mux.com/jXMivUxOGvNdllJIM2798MLpaIYPBAvzaxG34WaZ3aA/capped-1080p.mp4", "dateModified" : "2025-07-08T15:47:27.239Z", "duration" : "PT45M39.648S", "height" : 1200, "name" : "Application-Security-for-Transformational-Product-Companies", "thumbnailUrl" : "https://resources.nopsec.com/hubfs/Application-Security-for-Transformational-Product-Companies.mp4/medium.jpg", "uploadDate" : "2025-07-08T15:47:21.211Z", "width" : 1920 } ```