5 articles
STRIDE, PASTA, LINDDUN, OCTAVE, Trike, VAST — all of them were built for software, retrofitted to AI. OWASP MAESTRO is the first framework purpose-built for agentic AI. This field guide translates its 7 layers into a pentester's checklist with concrete attack patterns per layer.
Josuanstya Lovdianchel · 
AI can remove repetitive AppSec work without removing accountability. Learn how to decide what to automate, what to augment, and when a security decision should be escalated to a person.
Josuanstya Lovdianchel · 
Regex SAST gives you thousands of theory-class findings. LLM-assisted review gives you confident rewrites that may not run. Deep Code Analysis is the third layer: a structural model of your code that proves which findings are real, reachable, and worth fixing.
Josuanstya Lovdianchel · 
如果您今天正在构建或运行软件，您可能正在同时处理微服务、无服务器功能、容器、第三方包以及大量的合规性检查项。每个活动部件都会产生自己的发现、仪表板和愤怒的红色警报。很快，风险可见性就像在凌晨2点的旧金山雾中驾驶——您知道危险就在外面，但您看不太清楚。
José Palanco · 
Plexicus和Céfiros之间的新合作将提升拉美和伊比利亚19个国家的应用安全性。此次网络安全合作为寻求主动防御网络威胁的组织带来了先进的应用安全态势管理（ASPM）解决方案。
José Palanco · Plexicus is Proof-Driven AppSec: validated findings, contextual understanding, and reviewed remediation — anchored in evidence, scoped with you.
