Adaptive application security for the AI era
Joined May 2008
- Tweets 18,257
- Following 12,155
- Followers 21,951
- Likes 9,264
3,681 Photos and videos
Is your compliance posture ready for AI-generated code risks, supply chain mandates, and continuous attestation requirements?
Find out June 18 with Tim Brown, @WeldPond & Anthony Barkley.
Free webinar → veracode.com/resources/webin…
4
1
7
424
The 2026 Cyberthreat Defense Report benchmarks security posture across industries and regions.
See where your organization stands
→ veracode.com/resources/analy…
1
62
AI is changing the economics of software risk.
As AI accelerates development and expands the software supply chain, AppSec leaders need continuous verification, risk-based prioritization, secure governance and proof software is safe to ship.
Read more: veracode.com/blog/ai-and-sof…
1
2
88
The former CISO at the center of the SolarWinds SEC case. The co-founder who pioneered appsec. Veracode's Chief Strategy Officer.
One panel. One conversation. June 18 at 11 AM ET.
Register free → veracode.com/resources/webin…
1
68
If #AI is helping developers code 10x faster, can your security program keep up? Veracode’s Sohail Iqbal shares what CISOs need to know about AI-assisted development, secure code validation, risk prioritization & bringing #AppSec into developer workflows.
veracode.com/blog/what-to-kn…
1
173
80.7% of organizations got breached last year.
Read the 2026 Cyberthreat Defense Report to learn why — and what separates the 19.3% who didn't
veracode.com/resources/analy…
1
98
66% of critical long-lived vulnerabilities come from third-party code, not your engineers. Add AI-generated code to the mix, and “scan once, patch later” no longer works. Here’s what modern software supply chain risk management actually looks like:
veracode.com/resources/best-…
1
1
142
20 years of Veracode 🎉
From the early days of #AppSec to today’s AI-driven software landscape, we’ve helped organizations understand, reduce, and manage software risk at scale.
Trust matters more than ever.
Trust is Veracode. 💪
🖇️ veracode.com/blog/data-power…
1
142
31% of breaches now start with exploited vulnerabilities, making them the #1 attack vector. Meanwhile, 66% of critical vulns come from third-party code. Security teams need a real software supply chain security framework, not more point tools.
veracode.com/blog/strong-sof…
1
110
AI-enabled evasive malware = #1 security threat concern (45.5%). Traditional defenses? Not cutting it anymore.
Tomorrow at 11am ET, discover how leading orgs defend against AI-powered attacks. Register: veracode.com/resources/webin…
1
84
The 2026 Verizon #DBIR is out, and the findings for AppSec teams are hard to ignore. This year’s report includes a CWE survival analysis showing how long flaws stay open in production environments. We broke down what it means for developers and defenders:
veracode.com/resources/2026-…
1
166
Top AppSec teams prioritize vulnerabilities based on:
→ Exploitability
→ Exposure
→ Business impact
Risk-based prioritization helps reduce noise, focus remediation efforts, and demonstrate measurable security outcomes.
veracode.com/blog/how-to-man…
1
103
80.7% of orgs are getting breached despite rising security budgets. The problem? Only 42.2% have fully implemented secure coding practices.
On May 21st at 11am ET, learn how to close the gap without slowing down:
veracode.com/resources/webin…
#DevSecOps #CyberSecurity
1
80
We tested 150 AI models writing code. Only 55% of what they generated was secure.
The other 45% contained known vulns, and that number hasn’t really improved in 2 years.
AI coding tools are accelerating development & security debt at the same time.
veracode.com/blog/ai-coding-…
1
104
The scariest thing about AI in software development isn’t AI replacing developers. It’s software being created faster than trust can keep up. More code. More dependencies. Less human review. Our CEO Brian Roche on why software trust is the next frontier:
veracode.com/blog/ai-inflect…
2
95
Security budgets are up. Breaches are too.
81% of organizations were breached last year, according to the 2026 Cyberthreat Defense Report. You can’t fight AI-speed threats with human-speed remediation.
How leading teams are closing the AppSec gap: veracode.com/blog/why-are-or…
1
94
The question used to be “Did we scan it?” That’s no longer enough.
Security leaders now need proof their software can be trusted. Continuous, portfolio-wide, supply chain aware, and evidence-driven.
What best-in-class looks like in 2026: veracode.com/blog/applicatio…
63
The “vulnpocalypse” is coming. AI-driven testing will expose years of hidden security debt fast, and discovery will outpace remediation.
Are you ready to handle the surge?
Here’s what to expect and how to prepare: veracode.com/resources/vulnp…
1
86
The 1990s hacking community helped shape modern security thinking. This podcast from @riskydotbiz revisits that era with Veracode's @WeldPond, from open collaboration to early infosec norms that still influence application risk management today. risky.biz/HTWGO2-stories/
1
1
3
503