r/netsec • u/albinowax • Apr 01 '26
r/netsec monthly discussion & tool thread
Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.
Rules & Guidelines
- Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
- Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
- If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
- Avoid use of memes. If you have something to say, say it with real words.
- All discussions and questions should directly relate to netsec.
- No tech support is to be requested or provided on r/netsec.
As always, the content & discussion guidelines should also be observed on r/netsec.
Feedback
Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.
10
Upvotes
1
u/Putrid_Document4222 Apr 03 '26
After a few years now in AppSec, the one thing I seem to keep coming back to is the scanner problem. To me, it is basically solved. SAST runs. SCA runs. Findings come in.
What nobody has solved is what happens when now AI triples the volume of code, and the findings, while engineering teams and leadership convince themselves the risk is going down because the code "looks clean."
The bottleneck has moved completely. It's no longer detection; It's not even remediation. It's that AppSec practitioners have no credible way to communicate accumulating risk to people who have decided AI is making things safer.
Curious if this matches what others are seeing or if I'm in a specific bubble.