I put this table capturing my impressions of security tool effectiveness against the 2017 OWASP Top 10 together for a discussion with developers this week. What do people think, is it accurate? lnkd.in/eFXCtg8
1
1
Replying to @mkonda
Not the answer you're looking for, but I've found talking to developers about the @owasp Proactive Controls is a better use of time. owasp.org/images/b/bc/OWASP_…

Nov 22, 2019 · 6:49 PM UTC

1
Replying to @bilcorry @owasp
I’m a fan. But the comprehensive failure of tools is central to a true developer focus.