Let's Talk Security Testing

Ben Armstrong, Thomas Ballin

Your hosts, cyber tech founders Ben Armstrong and Thomas Ballin, have been increasingly frustrated with security testing's archaic approach. So they set about solving the problems they encountered themselves and created the Cytix platform. In the same spirit, they're bottling these thoughts, experiences and anecdotes into honest and transparent 30-minute sessions to open up the discussions with you. Let's Talk Security Testing is a podcast to challenge norms in cyber security testing for industry thought leaders ready to take on a new approach.

  1. The Reality of Agentic Application Security

    HACE 5 DÍAS

    The Reality of Agentic Application Security

    Agentic AI is the latest shift in application security, but how much of it is delivering real results? In this episode, we break down: - What “agentic” really means in AppSec - Where agentic workflows are genuinely adding value - The limits of automation, and where human expertise still leads - How enterprises are adopting it without overcommitting If you’re trying to separate practical capability from future promise in AI-driven security, this one’s for you!

    34 min
  2. Is AI Pentesting Just DAST in Disguise?

    2 FEB

    Is AI Pentesting Just DAST in Disguise?

    Is AI Pentesting Just DAST in Disguise? 🤖💥 Everyone’s talking about AI-powered pentesting - but is it actually useful, or just dressed-up DAST? In this episode, we dig into: - What AI tools really test (and what they miss) - Why they sometimes look better than they are - Hallucinations, pricing, and trust - How they compare to micro pen tests and manual reviews If you’re trying to make sense of AI in security testing, this one’s for you.

    33 min
  3. Does CAB Still Belong in Modern DevSecOps?

    09/07/2025

    Does CAB Still Belong in Modern DevSecOps?

    In Season 2, Episode 9, we ask a big question: does the Change Advisory Board (CAB) still have a place in today’s fast-moving DevSecOps world? Traditionally seen as a gatekeeper for risk, CABs are often accused of slowing things down, blocking innovation, and creating more process than value. But can AI shift the role of CAB from bottleneck to enabler? We explore what a modern, AI-assisted CAB could look like, and whether change governance can finally move at the speed of development.

    24 min
  4. Is Vibe Coding a Developer Superpower or a Security Risk?

    16/06/2025

    Is Vibe Coding a Developer Superpower or a Security Risk?

    In Season 2, Episode 8, we throw planning out the window and build a web app purely on vibes. No specs, no structure, just straight-up code. Then, we do what any responsible team would do... we try to hack it. In this live pen testing session, we explore what happens when code is written without rules, and whether security still holds up under pressure.

    27 min
  5. Who Wins at Threat Modelling: AI or a Real Hacker?

    30/04/2025

    Who Wins at Threat Modelling: AI or a Real Hacker?

    In Season 2, Episode 7, we put human intuition to the test against machine precision. As AI tools become more embedded in secure design workflows, we ask the big question: can AI threat model as well as a real human? We pit a seasoned pentester against our own AI tool in a live challenge, and the results might surprise you. 👉 Try the tool for yourself: https://www.cytix.io/change-analysis-tool

    19 min
  6. Can AI Replace Pentesters?

    31/03/2025

    Can AI Replace Pentesters?

    In Episode 6, Season 2, we unpack the explosive growth of AI and ask the critical question: could AI ever replace human pentesters? Subscribe to keep up to date with all new episodes, released every 2 weeks!

    21 min
  7. Hack it or Track it: The Hunt for Cyber Vulnerabilities

    10/03/2025

    Hack it or Track it: The Hunt for Cyber Vulnerabilities

    In Episode 5, Season 2, we dive into vulnerabilities and their detection methods, from automated scanners to human-led pen testing. Plus, we put our skills to the test in Hack it or Track it, where we break down real vulnerabilities, discussing how we’d exploit them and how we’d detect them before attackers do. Subscribe to keep up to date with all new episodes, released every 2 weeks!

    20 min
  8. Micro Pen-Testing: When Less is More in Cybersecurity

    24/02/2025

    Micro Pen-Testing: When Less is More in Cybersecurity

    In episode 4 season 2, explore the innovative world of Micro Pen-Tests - a targeted, bite-sized approach to security testing that stems from threat modelling and development changes. Subscribe to keep up to date with all new episodes - released every 2 weeks!

    16 min
Ver todo (31)

Acerca de

Your hosts, cyber tech founders Ben Armstrong and Thomas Ballin, have been increasingly frustrated with security testing's archaic approach. So they set about solving the problems they encountered themselves and created the Cytix platform. In the same spirit, they're bottling these thoughts, experiences and anecdotes into honest and transparent 30-minute sessions to open up the discussions with you. Let's Talk Security Testing is a podcast to challenge norms in cyber security testing for industry thought leaders ready to take on a new approach.

Información

  • Creador
    Ben Armstrong, Thomas Ballin
  • Años de actividad
    2024 - 2026
  • Episodios
    31
  • Clasificación
    Apto
  • Copyright
    © Cytix 2023
  • Mostrar sitio web
    Let's Talk Security Testing