---
id: 8050
title: "Getting Started on Your Application Security Journey"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/application-pentesting/getting-started-on-your-application-security-journey/"
published_at: "2020-06-16T00:00:00Z"
tags: ["devsecops", "application-security", "sdlc", "governance", "appsec-program"]
phying_url: "https://phying.com/item/8050"
lang: en
---

# Getting Started on Your Application Security Journey

## Summary

Four myths hold back application security programs, from 'AppSec teams are optional' to 'DevOps shops do not need one'; successful journeys start with a central governing team and defect discovery.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2020-06-16T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/application-pentesting/getting-started-on-your-application-security-journey/
- **Phying News:** https://phying.com/item/8050