Global AppSec Strategy Managing Risk and Innovation at Scale | Let's Talk ASPM #89

Krishna Chaganti, Associate Director of AppSec at S&P Global, joins Raj to share how he scaled a globally distributed security program and built out a remediation support team that developers actually want to work with. Krishna explains how his team handles dynamic and static assessments, coordinates vulnerability triage across thousands of assets, and contributes to community initiatives like DVDB and bug bounty programs. The discussion also covers AppSec’s expanding role in M&A due diligence, the importance of proactive developer education, and why AI and automation are reshaping security expectations at enterprise scale. _________________________________________________________________________________ 𝗙𝗼𝗹𝗹𝗼𝘄 𝘂𝘀 Home: www.armorcode.com LinkedIn: https://www.linkedin.com/company/armorcode Twitter/X: https://twitter.com/code_armor _________________________________________________________________________________ 𝗠𝗼𝗿𝗲 𝗳𝗿𝗼𝗺 𝗔𝗿𝗺𝗼𝗿𝗖𝗼𝗱𝗲 🎙️ Podcast: https://www.armorcode.com/podcast 📝 Blogs: https://www.armorcode.com/blogs 📰 ArmorCode News: https://www.armorcode.com/news 🧠 Resources: https://www.armorcode.com/resources _________________________________________________________________________________ 𝗪𝗵𝗮𝘁 𝘄𝗲'𝗿𝗲 𝗯𝘂𝗶𝗹𝗱𝗶𝗻𝗴 ▶️ The ArmorCode Platform: https://youtu.be/rsIWqIV1yIU?feature=shared 📃 Platform Overview: https://www.armorcode.com/platform-overview 🚀 Take a Tour: https://www.armorcode.com/tours _________________________________________________________________________________ 𝗔𝗯𝗼𝘂𝘁 𝘂𝘀 ArmorCode is charting the future of application security. The ArmorCode platform unifies application security and infrastructure vulnerability management to address the biggest problems in AppSec today. Companies of all sizes scale their security effectiveness by 10x and maximize their ROI on existing security investments with ArmorCode through Application Security Posture Management, Unified Vulnerability Management, Application Security Orchestration and Correlation, and DevSecOps orchestration.