Steve Springett joins the show to talk about Dependency Check and Dependency Track. He also discusses how they can help prevent you from using components with known vulnerabilities.  You can find Steve on Twitter @stevespringettFOLLOW OUR SOCIAL MEDIA: ➜Twitter: <a href='https://twitter.com/AppSecPodcast'>@AppSecPodcast</a> ➜LinkedIn:<a href='https://www.linkedin.com/showcase/83990241'> The Application Security Podcast</a> ➜YouTube: <a href='https://www.youtube.com/channel/UCfrTGqjSsFCQW4k6TueuY-A'>https://www.youtube.com/@ApplicationSecurityPodcast</a> Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

David Habusha -- Third Party Software is not a Cathedral, It’s a Bazaar

Chris Romeo and Robert Hurlbut dig into the tips, tricks, projects, and tactics that make various application security professionals successful. They cover all facets of application security, from threat modeling and OWASP to DevOps+security and security champions. They approach these stories in an educational light, explaining the details in a way those new to the discipline can understand. Chris Romeo is the CEO of Devici and a General Partner at Kerr Ventures, and Robert Hurlbut is a Principal Application Security Architect focused on Threat Modeling at Aquia.