Ashton Arons

ex-calculus teacher hopping into the tech world 😎

[Ashton Arons @AshtonArons]

Despite rapid growth and significant investment, cybersecurity is still a moving target as new technologies, threats, and attack surfaces originate.

One area of security that remains a significant blindspot is how continuous application code and configuration changes (aka …

[Ashton Arons @AshtonArons]

Application Security Posture Management (ASPM) is the practice of making applications secure and resilient to significantly reduce business risk.

The goal of ASPM is to maintain a continuous and comprehensive risk posture of an application architecture running in …

[Ashton Arons @AshtonArons]

ASPM is an innovative top-down way to identify and manage critical business risks in your applications. It augments and integrates with your existing tool ecosystem so you can contextualize the true impact of threats, vulnerabilities, and attack surfaces that impact your …

[Ashton Arons @AshtonArons]

You won't believe what this CISO said about Bionic...

See Bionic in action here: https://t.co/eFbVUqXuu0

[Ashton Arons @AshtonArons]

ASPM is essential in securing cloud-native apps at scale.

In 2022, applications and APIs are the fastest growing and primary attack surfaces for any digital, online, or software-first business.

Learn all about application security posture … https://t.co/K5IrZixm9l

[Ashton Arons @AshtonArons]

"We shift security left so that critical risks never end up in production."

Unfortunately, this is never the case. Being blind in production is not an effective security strategy.

#ASPM #ApplicationSecurity #AppSecurity

[Ashton Arons @AshtonArons]

Join me next week at Booth # 1960 in the Mandalay Bay Hotel to see Bionic in action!

Book your in-person demo for August 10-11 here: https://t.co/xudZx8iFRd

#BlackHat2022 #ASPM
#ApplicationSecurity #CyberSecurity #devsecops #appsec

[Ashton Arons @AshtonArons]

Meet this week's podcast guest - Peter Chestna

In Episode 18 of Tattoos, Code, and Data Flows, Matt Rose interviews Peter Chestna, CISO of North America at Checkmarx. He is also a Board Member for the DevSecCon Global Community and MergeBase.

Listen to the full episode …

[Ashton Arons @AshtonArons]

You can have a "critical" CVE with a CVSS score of 9.9 that is NOT:
- Accessing PII data
- Internet facing
- Exploitable

And you can have a "medium" CVE with a CVSS score of 5.5 that IS:
- Accessing PII data
- Internet facing
- Exploitable

So, which do you prioritize? …

[Ashton Arons @AshtonArons]

Headed to Black Hat 2022?

Join us at Booth # 1960 in the Mandalay Bay Hotel to see Bionic's magic on August 10-11.

Book your in-person demo for Black Hat 2022: https://t.co/5cvvXm0aD2

#BlackHat2022 #ASPM
#ApplicationSecurity #CyberSecurity

[Ashton Arons @AshtonArons]

“What the heck does ASPM do for me?”

Here at @Bionic - we get that question a lot.

ASPM is a hot new technology that organizations and analysts are investigating and researching. They are reading vendor reports, social media posts, and even blogs like this one to try …

[Ashton Arons @AshtonArons]

In Episode 14 of Tattoos, Code, and Data Flows, Matt Rose interviews Chris Hughes, CISO and Co-Founder at Aquia Inc. Chris is also a board advisor for Microsec AI Security, Resurface Labs, and ByteChek.

Listen to the full episode here: https://t.co/GXcXtO4hu3

#ASPM …

[Ashton Arons @AshtonArons]

There is no such thing as a bug-free application.

Fixing bugs in your applications or cloud infrastructure is a major part of the everyday activities of your development or infrastructure teams.

Organizations go as far as offering financial rewards to ethical hackers on …

[Ashton Arons @AshtonArons]

DevOps is supposed to speed up delivery, but when there is too much back and forth, customers get left behind.

- Security sends JIRA tickets to developers.
- Security waits for developers to fix.
- Developers fix and wait for security.

And repeat...

Dev(Sec)Ops …

[Ashton Arons @AshtonArons]

Do you think the term "Shift Left" is overused?

Check out what Damien Suggs had to say about it on the latest episode of Tattoos, Code, & Data Flows.

Listen to the full episode on the platform of your choice: https://t.co/Iso7K8viWT

[Ashton Arons @AshtonArons]

Cloud security or application security... where do I start?

The truth is, they are two very important pieces to the same puzzle.

Cloud security (specifically CSPM) - looks at the cloud services and the interconnections.

Application security (specifically ASPM) - looks …

[Ashton Arons @AshtonArons]

Join Bionic at this year's RSA 2022 Conference in the South Expo Hall at booth # 1935 from June 6-9.

Learn how we provide unique visibility into the security, data privacy, and operational risk of applications running in production at scale. While you’re there, grab …

[Ashton Arons @AshtonArons]

In this episode of Bionic Uncensored, Matthew Rose talks about how #ASPM makes Software Composition Analysis BETTER!

Book a Demo today to gain deeper application visibility so that you can effectively manage your application security posture!

#CloudSecurity #SCA …

[Ashton Arons @AshtonArons]

Cloud security tools can see:

- Infrastructure
- Containers
- Cloud providers

Cloud security tools CANNOT see:

- Message brokers
- App-level API connections
- Services running inside the containers

App-level visibility is a must have for complete visibility

#ASPM …

[Ashton Arons @AshtonArons]

Due to the explosive growth in recent years of open source packages, #development and #security teams are doubling down on the usage of Software Composition Analysis (#SCA).

The recent huge venture capital investments and valuations of … https://t.co/KwfrkFIFYy