Oct 20, 2026 · 1 hr 14 min · 13 segments
In episode 337, the hosts reconvene for their quarterly crossover discussion with Kurt and Cameron from the Coffee, Chaos, and ProdSec podcast to analyze the current state of software security, AI…
Seth LawHostKen JohnsonHostCameronGuestKurtGuestfocusing on the wrong thing, though, in that conversation.
You're focusing on a detection, which I think majority of people I know are focusing on remediation, then heading into detection, because we already have a mountain of risk.
We all know we have a mountain of risk.
We have a mountain of problems.
My goal isn't to find more problems right now.
My goal is to, hey, let's burn down the problems and then let's shift into these, you know, agentic and find more interesting and tricky bugs.
So I think that's the kind of different mentality that I'm talking with practitioners and other people.
We're all just focusing on like, how do we improve remediation? And that's easy, right? You can see like, hey, the last six months, our average, you know, vulnerability detection was we found 4000 and our remediation capacity was 2000 bones per month.
with this new skill, we're now remediating 8,000.
And so now we're finally out competing what's coming in, which now I can start to think about.
I can actually start thinking about moving forward and finding interesting
See, that's interesting to me because most of the organizations that I'm dealing with right now, Cameron, are still struggling with the number of items that are coming in there.
focusing on the wrong thing, though, in that conversation.
You're focusing on a detection, which I think majority of people I know are focusing on remediation, then heading into detection, because we already have a mountain of risk.
We all know we have a mountain of risk.
We have a mountain of problems.
My goal isn't to find more problems right now.
My goal is to, hey, let's burn down the problems and then let's shift into these, you know, agentic and find more interesting and tricky bugs.
So I think that's the kind of different mentality that I'm talking with practitioners and other people.
We're all just focusing on like, how do we improve remediation? And that's easy, right? You can see like, hey, the last six months, our average, you know, vulnerability detection was we found 4000 and our remediation capacity was 2000 bones per month.
with this new skill, we're now remediating 8,000.
And so now we're finally out competing what's coming in, which now I can start to think about.
I can actually start thinking about moving forward and finding interesting
See, that's interesting to me because most of the organizations that I'm dealing with right now, Cameron, are still struggling with the number of items that are coming in there.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.