Explore the complexities of securing extensive application portfolios in this 45-minute OWASP Foundation presentation. Dive into application attack surface analysis and management, focusing on its importance, challenges, and various approaches for large-scale applications. Learn about comprehensive DevSecOps strategies, including API analysis, black-box dynamic analysis, and network analysis for inventory gathering. Discover techniques for managing web application attack surfaces, including static code analysis and runtime instrumentation. Gain insights into mobile application-specific attack surfaces like deep links and exposed components. Examine a scalable application attack surface management architecture and understand how to develop a customized program that aligns with organizational strategies and yields tangible benefits.