Season 5 Finale — A cross section of #AppSec

Season 5 covered application security from tools and threat models to mentoring, self-care, coaching, dependency risk, and program design. Chris and Robert revisit the guests whose explanations best captured that range. Simon Bennetts introduces the ZAP Heads Up Display, Izar Tarandach explains pytm, Tanya Janca and Nancy Gariché discuss mentoring, Björn Kimminich presents Juice Shop, Caroline Wong addresses self-care, Adam Shostack examines the human layer of threat modeling, Matt McGrath defines security coaching, Steve Springett explains Dependency-Track, and Ronnie Flathers describes building sustainable programs. Organized as guest-level chapters, the finale works as a guide to the season and a reminder that effective AppSec combines technical capability with community, learning, and organizational change.The Application Security Podcast is brought to you by Security Journey.About Security JourneySecurity Journey provides application security education for developers and everyone in the software development lifecycle.→ Learn more about Security JourneyConnect with Chris Romeo and Robert Hurlbut:→ Chris Romeo on LinkedIn→ Robert Hurlbut on LinkedInMentioned in this episode:→ OWASP ZAP→ ZAP Heads Up Display (HUD)→ pytm→ OWASP Juice Shop→ Dependency-Track→ Sonatype OSS Index→ SPDX→ #CyberMentoringMonday→ OWASP Juice ShopFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Season 5 highlights02:46 Simon Bennetts on the ZAP HUD04:50 Izar Tarandach on pytm07:32 Tanya Janca and Nancy Gariché on mentoring11:29 Björn Kimminich on OWASP Juice Shop15:43 Caroline Wong on self-care in security18:00 Adam Shostack on threat modeling’s human layer20:54 Matt McGrath on security coaching24:06 Steve Springett on Dependency-Track28:22 Brook Schoenfield on security architecture31:12 Ronnie Flathers on building AppSec programs35:28 Closing Season 5