Josh Grossman--AI & SAST: Is it a match?

About this episode

Josh Grossman discusses the intersection of AI and static analysis in application security.

AI coding tools are accelerating development fast, but they’re also exposing the limits of traditional AppSec tooling. Josh Grossman, CTO of Bounce Security and longtime AppSec consultant, joins the podcast to break down AGHAST, his new open-source security tool that combines static analysis with AI to uncover business logic flaws and authorization issues that traditional scanners miss. FOLLOW OUR SOCIAL MEDIA: ➜Twitter: @AppSecPodcast ➜LinkedIn: The Application Security Podcast ➜YouTub...

People in this episode

Hosts: Chris Romeo, Robert Hurlbut

Guest: Josh Grossman

Topics covered

• AI
• SAST
• AppSec
• static analysis
• security tools

Keywords

• AI coding tools
• AppSec tooling
• AGHAST
• open-source security tool
• business logic flaws

Mentioned in this episode

Organizations: Bounce Security, AppSecPodcast

More episodes of The Application Security Podcast

• Dwayne McDaniel -- Secrets Sprawl and How AI is Impacting Secrets · May 14, 2026 · 45 min
• Tanya Janca - Secure Vibe Coding · April 30, 2026 · 48 min
• Caroline Wong--The AI Cybersecurity Handbook · April 21, 2026 · 45 min
• Steve Wilson--OpenClaw and Advanced AI Agents · April 15, 2026 · 50 min
• Brad Geesaman - Redefining AppSec with AI: Shrinking Toil, Expanding Impact - How LLMs are able to reduce toil in triage-heavy AppSec workflows · October 28, 2025 · 42 min
• OWASP Candidate Debate - 2025 Edition · October 15, 2025 · 1h 8m