What 200 SAST Triage Sessions Taught Me About Application Security

There’s a pattern in security tooling that I’ve seen across multiple roles, multiple products, and multiple organizations. The team buys the SAST tool. The first scan runs. The report comes back with somewhere between 200 and 2,000…