Webinar Description
Key Takeaways
- Live demonstration of full repository security scanning versus traditional pull request scanning
- Techniques for detecting authentication, authorization, and business logic flaws through contextual analysis
- Practical guidance on risk prioritization and integration with GitHub and GitLab workflows
- Designed for AppSec professionals, DevSecOps teams, and security architects
About the Event
This live webinar from DryRun Security features CEO James Wickett and Senior AppSec Engineer Zac Fowler demonstrating DeepScan, a tool designed to perform security reviews across entire code repositories. The session contrasts full repository scanning with conventional pull request scanning, which only examines new code changes and may miss vulnerabilities embedded in existing codebases.
Full Repository Scanning Versus Pull Request Analysis
Traditional static application security testing (SAST) tools typically analyze code changes in isolation. DeepScan takes a different approach by examining the complete repository, using broader context to identify risky dependencies and security issues that isolated scans might overlook. The founders will explain how repository context improves detection of authentication flaws, authorization weaknesses, and business logic vulnerabilities.
Risk Prioritization and AppSec Integration
The session covers how findings are validated and prioritized to help teams focus on genuine risks rather than accumulating security backlogs. Attendees will learn when to deploy full repository scans, how to integrate results into a Risk Register, and how this approach fits within a broader Application Security program. The webinar includes guidance on working with GitHub and GitLab integrations.
Who Should Attend
The webinar is intended for application security professionals, software engineers, DevSecOps teams, security architects, and technical leaders responsible for code security and risk management. Organizations developing software in house, including SaaS providers and enterprises with development teams, will find the content relevant. A live Q&A session allows attendees to ask questions directly.