Mostly Dead or Mostly Back: The Zombie Resurrection of DAST in an AI World

Episode notes

In this episode, we dig into whether DAST is dead, mostly dead, or quietly making a comeback dressed in an AI trench coat. The conversation traces the origins of dynamic application security testing from nmap scans and open source hacker tools to a market now valued at nearly four billion dollars and growing. We debate where DAST ends, and AI pen testing begins, whether AI can find a vulnerability nobody has ever seen before, and what happens when you compound the false positives of rigid rule-based scanning with the hallucinations of a large language model. Also: cats meowing the Final Countdown. Join the Conversation If AI pen testing can already find zero days in open source software, does human pen testing still have a defensible edge - or are we just not ready to admit it doesn't? FOLLOW OUR SOCIAL MEDIA: Twitter: @SecTablePodcast LinkedIn: The Security Table Podcast YouTube: The Security Table YouTube Channel Thanks for Listening!

• Don't Bury the Model T: Why STRIDE Still Drives in an AI World65 / 100
• Realists At The Table: How To See Through The Hype
• The Agentic Access Problem: When AI Becomes Its Own Administrator
• The Tool Creep Problem: When More Security Means Less Security
• The Human In The Loop Illusion: Why AI Approvals Are Failing Security