David

always wondering why. appsec allows me to both hack you and secure you better. find out more with @PigeonLabsAI

[David @appsecinsights]

I've written a decent amount into some of my appsec insights already so I'll just post links to some of my already written content, if you want to start understanding how I think about appsec amongst other things. I started off here: https://t.co/YVVHoGyZlu

[David @appsecinsights]

Startups are hard lol

[Vincent Liu @VinceLiuSphere]

If you use QuickBooks or Wave for invoicing and are tired of their 1% no max cap ACH fees, I’d love if you tried our software out. We have lower fees so you’d save money with us. I’d be happy to give you a discount code on our $25/mo basic plan and you’d always have a direct line to me.

[David @appsecinsights]

Going to all these founder events makes me happy that it’s the “little guys” taking on the giants and winning. I’m rooting for you all.

[David @appsecinsights]

as a startup getting customers, it really is about how much you simplify what you’re doing to leads that will get you through the door. I just tell startups I hack them before others do and thats about it

[Pigeon labs @PigeonLabsAI]

Coo Coo

[David @appsecinsights]

Hacking is like heists. Read about it here:

https://t.co/7r8iLSGiKm

[David @appsecinsights]

Appsec threat modeling is often done poorly from what I’ve seen.. but why? New substack article dropping soon on my thoughts!

[David @appsecinsights]

Next post on business logic flaws in my breaking down appsec series part 5:

https://t.co/Zl49x3c3Jh

[David @appsecinsights]

@brysonbort @0xTib3rius If the companies have had knowledge of prior attacks, and they continue to provide the means to internet access for these models via their harness, wouldn’t that make these companies liable?

[David @appsecinsights]

I’m trying to meet with founders in the NYC space and learn from you.

I met with @VinceLiuSphere and he taught me about what bookkeeping is and the insights you get from doing it early on as a startup.

DM me if you’re in the NYC area and have something to teach me!

[David @appsecinsights]

@VinceLiuSphere

[Vincent Liu @VinceLiuSphere]

For the businesses, startups, folks out there needing cybersecurity, pen tests, SOC II, .. checkout and follow @appsecinsights. Founders in NYC are super smart. Can save you money and help you out. They do $1 Pen tests and post about cybersec on their feed/substack

[David @appsecinsights]

Hacking always starts from understanding appsec in depth. Appsec is the why, hacking is the how. If you want to learn to hack or want to protect yourself from hacking, learn application security!

[David @appsecinsights]

These 5 startups will get $1 penetration tests/appsec assessments! Just email [email protected] with the following:

- your name
- your company website
- if you have had a sec assessment before
- why you want it

#pentest #startup #cybersecurity

[David @appsecinsights]

I just started up a cybersecurity services company and am looking for 5 small startups to provide real value for in the month of September. #startup #cybersecurity

[David @appsecinsights]

My next post in my breaking down Appsec series I talk about when you can start analyzing how applications become “hackable”

Read about it here!

https://t.co/LPxesMoINc

[David @appsecinsights]

When building AI systems to automate human processes, you have to know what problems are inherently semantic vs syntactic based and divert to agents accordingly.

[David @appsecinsights]

It’s important to start a process manually, but it’s not okay to make that the process that stays. Automate, automate, automate! Ask your in house expert what that entails and automate around those insights. Don’t make your world more complex!

[David @appsecinsights]

I’ve been asked before from a small startup, “I think we need a SOC2 to get businesses to sign with us. Do you think that we do?”. I sat down with them, understood their story, read some of their security riders, and I said:

[David @appsecinsights]

I separated out my GTFO framework of securing any application’s boundaries with the first covering identity and now the second covering authorization:

https://t.co/u6CmouOkeO