Strategizing SAST for Speed, Accuracy, Scale and Dev Experience

Learn how to optimize Static Application Security Testing (SAST) implementation in CI/CD pipelines through this 51-minute conference talk from RSA Conference. Discover practical strategies for overcoming common SAST integration challenges including false positives, language support limitations, and scaling issues. Explore how risk-based orchestration, automation, and seamless integration techniques can dramatically improve SAST adoption rates while enhancing developer experience. Gain insights into proven methodologies that have achieved measurable results: reducing false positives by 35%, accelerating remediation processes by 60%, and increasing developer adoption by 40%. Master approaches for balancing security thoroughness with development velocity, implementing effective SAST workflows, and creating developer-friendly security processes that integrate naturally into existing development practices.