Appsec people, what can you do that a scanner can’t?

I’m not posting this to shit on you, I’m doing it to raise my own awareness in the field.

I’ve done my own share of manual analysis and I’ve always found that using a static analysis scanner for most workloads is simply far more efficient and almost always better - humans miss things, they make mistakes. Or maybe I just suck, I’m good with that too.

Personally I’d be using a scanner then have app sec people review the findings …

analysis appsec awareness cybersecurity doing found own people scanner share static analysis workloads