Podcast:  OWASP Flagship Projects - Episode 01

Mark Miller
•
Jun 4th, 2021

People | Process | Technology Podcast · OWASP Flagship Projects - Episode 01

 

In this episode of the People | Process | Technology podcast, I speak with Simon Bennetts from the Zap Project, Christian Folini from the ModSecurity Core Rule Set Project, and Steve Springett from the Dependency Track Project.

This is part of an ongoing podcast series, highlighting the OWASP Flagship Projects that will be featured at the OWASP 20th Anniversary Celebration in September. I talk with the project leads to hear what they have been working on for the past year, what their plans are for the coming year, and what we can expect to see at the conference in September.

The OWASP 20th Anniversary Celebration is a 24 hour global event, featuring sessions from each of the OWASP flagship projects, leaders of the Top Ten Project, presenters from around the world, and sessions from people who have helped OWASP over the past 20 years. Registration is open, and you can't beat the cost ... it's free. Even if you can't attend, please register so you'll have access to all of the recorded sessions following the conference. 

Our program was produced today by Executive Editor Mark Miller. Special thanks to today's guests, Simon Bennetts from the ZAP Project, Christian Folini from the ModSecurity Core Rule Set Project, and Steve Springett from the Dependency Track Project. You can stream our archive of over 160 episodes, for free, at owasp-podcast. The show is available on all of your favorite podcasting platforms, including Spotify and Apple Podcasts.

Support for this broadcast is provided by OWASP, celebrating twenty years of making software safer. OWASP hosts their 24 hour, 20th Anniversary Celebration in September. Head to 20thAnniversary.owasp.org for your free ticket.

Support also provided by JupiterOne, who believes that security is a basic right to every person, company, and enterprise. Security begins with cyber asset visibility, and includes understanding the relationships between those assets. Get started with your free, lifetime license at info.jupiterone.com/get-started.

Resources for this article

Other articles

Exposure assessment decides which vulnerabilities are reachable, unprotected and critical.

John Le
•
Nov 3rd, 2026
  • Exposure Assessment
  • CAASM
  • CTEM
  • Exposure Management
Continuous Threat Exposure Management (CTEM) Guide

Continuous threat exposure management (CTEM) is a systematic approach that allows organizations to manage cyber threats as an ongoing program instead of a string.

John Le
•
Oct 28th, 2026

A measured look at PHP2Shell: what is known, how to scope where PHP runs, and how to prioritize updates by exposure.

John Le
•
Oct 21st, 2026
  • Vuln Mgmt
  • UVM
  • CAASM

Tools are silent.
Risks aren't.

See your full security program as one connected picture in a 30-minute demo tailored to your environment.