Varun Badhwar -- The Developer Productivity Tax

Varun Badhwar is a three-time founder, a luminary in the cyber security industry, and a clear communicator. He joins Chris and Robert on the Application Security Podcast to discuss scanning with context, SBOM plus VEX, and the developer productivity tax. The concept of a "Developer Productivity Tax" acknowledges the challenges developers face when bombarded with a plethora of vulnerabilities. This "tax" represents the drain on developers' time and resources as they navigate through a myriad of potential threats, many of which lack actionable context. The inefficiencies arising from this process can lead to significant delays in software development, emphasizing the need for more refined tools and techniques.Connect with Varun Badhwar:→ Endor Labs→ The Hard Thing About Hard Things by Ben HorowitzMentioned in this episode:→ Endor Labs→ The Hard Thing About Hard Things by Ben Horowitz→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society by Chris Hughes, Tony Turner→ OWASP Dependency-TrackFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Varun Badhwar: The Developer Productivity Tax02:11 You got to broadcast from wherever you are. So Robert is05:47 Yeah, very cool. So, let's, let's dive into that. You know08:39 CVSS. Because I know you've written a lot about CVSS, and11:51 Whenever I, whenever I hear about reachability, I'm always curious to15:00 Okay. So, here's another question for you. Uh, we've heard this19:13 So the perfect state in the future will be a tool21:06 I mean, I think it's gotta be a hundred percent to28:52 Yeah, you might as well have a result. You might, you31:48 There a consolidation coming in our market35:22 All right. Next question. Uh, what would it say if you36:40 Cool. Yeah, Tony Turner's a past guest. Chris Hughes is a