A Conversation With Sarit Tager

I had a blast catching up with my guest Sarit, who dove into how AI and LLMs are totally shaking up the world of application security. We talked about how combining these advanced AI models with deep organizational context is an absolute game-changer for automatically prioritizing and fixing code vulnerabilities before attackers can even strike. What We Talk About: The Remediation Challenge: Why advanced AI models are excellent at finding security flaws but still struggle to provide tailored fixes that won't break applications or cause severe alert fatigue. "PRD to Production": How generative AI is shifting the landscape by allowing product managers and designers to write code based purely on intent, and the new security challenges this creates. Context is King: The critical shift from relying on generic vulnerability scores (like CVSS) to leveraging deep organizational, cloud, and business context to prioritize the threats that actually matter. Automating the Defense: Why manual triaging using spreadsheets is a relic of the past, and how defenders must heavily automate their responses to keep pace with attackers utilizing AI for continuous exploits. The Next Three Years in AppSec: A look ahead at enterprise security programs, focusing on integrating contextual AI guardrails directly into developer environments and automatically mitigating sophisticated new threat chains. 00:00 – Introductions and latest challenges 04:24 – Vulnerability management and prioritization evolution 12:48 – Data points and context sources 14:14 – Products delivering the context 20:11 – AppSec landscape in 1–3 years 23:15 – Upcoming product rollouts and wrap-up Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at: https://danielmiessler.com/upgrade Follow on X: https://x.com/danielmiessler Follow on LinkedIn: https://www.linkedin.com/in/danielmiessler/