The AppSec Overload Problem And Why Context Is the Cure

AI has changed application security in two ways at once: helping teams detect more risk than ever, while also creating far more of it. As AI-generated code accelerates development, applications contain more code, more components, and more attack surface, and every commit floods teams with alerts that all claim to be “critical”. According to the Checkmarx 2026 Future of AppSec Report, developers now spend 49% of their time on security-related tasks, largely due to too many findings, unclear remediation guidance, and constant context switching.

Detection isn't the problem. Overload is. When everything looks urgent, critical vulnerabilities get buried among false positives and low-impact findings, slowing remediation and increasing business risk.

The root cause is a lack of context. Code context shows whether a vulnerable path is actually reachable. Cloud and runtime context reveal whether it's exploitable in the real world. ASPM brings those signals together, turning isolated findings into a prioritised, actionable view of real risk. Without it, teams keep triaging noise while the vulnerabilities that truly matter slip through.

Join Alan Shimel, CEO of TechStrong, and Emma Datny, Sr. Product Marketing Manager from Checkmarx to explore how contextual risk scoring and ASPM are changing the way teams approach AppSec, and why the ones pulling ahead aren't finding more vulnerabilities, they're fixing the right ones faster.

Emma Datny

Sr. Program Manager - CheckmarX

Emma is a Senior Product Marketing Manager at Checkmarx, where she focuses on AI supply chain security, software supply chain security, and AppSec posture management. With a background in go-to-market for DevOps, trust & safety, and cybersecurity, she brings a sharp perspective on how the industry is evolving and what it means for the teams building and securing software today.

Yotam Steinberg

Product Manager - CheckmarX

Yotam is a Product Manager at Checkmarx, where he focuses on Application Security Posture Management (ASPM) and the evolving challenges of helping organizations manage application risk across increasingly complex software environments. With a background in Industrial Engineering and experience building enterprise-scale products, he brings a practical perspective on how security teams can prioritize what matters most, improve remediation workflows, and drive more effective risk reduction across the application security lifecycle.

Alan Shimel

Founder & CEO - Techstrong Group

Alan is founder, CEO & editor-in-chief of Techstrong Group, the company behind DevOps.com, Container Journal, Security Boulevard and Digital Anarchist, as well as co-founder of the DevOps Institute. As such, he is attuned to the world of technology, particularly cloud, DevOps, security and open source. With almost 30 years of entrepreneurial experience, Alan has been instrumental in the success of several organizations. He is an often-cited personality in the security and technology community and is a sought-after speaker at industry and government conferences and events. In addition to his writing, his DevOps Chats podcast, DevOps TV and Digital Anarchist audio and videos are widely followed. Alan attributes his success to a combination of a strong business background and a deep knowledge of technology. His legal background, long experience in the field and New York street smarts combine to form a unique personality. He is a graduate of St. John's University with a Bachelor of Arts in Government and Politics, and holds a JD degree from NY Law School.

Sponsored By: