Developer Security Proficiency: Accelerating Vulnerability Remediation with Integrated AST and Secure Developer Upskilling

Secure Code Warrior's Eric Johnson and Steven Zimmerman, DevOps Security Solutions Manager at Black Duck, look at why 85% of organizations already use AI in development while most haven't caught up on the processes needed to keep that code secure and compliant.

Watch the session to learn:

• Why AI coding assistants don't introduce new categories of risk — they generate the same kinds of vulnerabilities developers do, just faster and at greater scale
• How connecting Black Duck's AST scan findings directly to Secure Code Warrior's contextual training turns a raw finding into a fixed vulnerability inside the developer's own workflow
• Two ways to structure the fix: an automated dev-security feedback loop tuned to risk tolerance, or embedding remediation directly into existing developer workflows with no new tools to adopt
• SCW's new AI Insights capability, giving visibility into AI-generated code volume and model usage, including unapproved models
• How to use compliance frameworks like the EU Cyber Resilience Act, ISO 27001, and SOC 2 as the business case for funding developer-driven security