---
title: "How to bootstrap your AppSec program"
page_name: "How to bootstrap your AppSec program"
type: "resource"
slug: "ep-23-how-to-bootstrap-your-appsec-program"
published_at: "2025-12-16"
modified_at: "2026-06-16"
url: "https://www.sumologic.com/podcast/ep-23-how-to-bootstrap-your-appsec-program"
canonical: "https://www.sumologic.com/podcast/ep-23-how-to-bootstrap-your-appsec-program"
markdown_url: "https://www.sumologic.com/podcast/ep-23-how-to-bootstrap-your-appsec-program.md"
lang: "en"
excerpt: "On this episode of Masters of Data, Adam sits down with Zoe Hawkins and David Girvin to talk AppSec programs that don’t suck. David’s hot take from his 1Password and Red Canary days? AppSec is a people problem, not a..."
taxonomy_resource_type:
  - "Podcast"
taxonomy_resource_solution:
  - "SecOps and Security"
---

[ All Podcasts ](https://www.sumologic.com/resources?_resource_type=podcast)# How to bootstrap your AppSec program

### Adam White

Sr. Director, Technical Marketing

### David Girvin

Lead Technical Advocate

### Zoe Hawkins

Director, Content Marketing

Speakers

On this episode of Masters of Data, Adam sits down with Zoe Hawkins and David Girvin to talk AppSec programs that don’t suck. David’s hot take from his 1Password and Red Canary days? AppSec is a people problem, not a tooling problem—stop being the person devs dodge at standup. We cover the essentials: build relationships first, threat model based on actual business risk (not your anxiety), and ditch the “shift left” obsession with scanning everything. Instead, start with offensive testing that finds vulnerabilities attackers can actually exploit.

More Podcast

Explore More!

Explore more Sumo Logic Podcast

[Podcast

I’ll have my AI agent call your AI agent: Battle for your digital hub

 ](https://www.sumologic.com/podcast/ill-have-my-ai-agent-call-your-ai-agent-battle-for-your-digital-hub)[Podcast

Operating at galactic scale: Inside Sumo Logic’s agentic security program

 ](https://www.sumologic.com/podcast/operating-at-galactic-scale-inside-sumo-logics-agentic-security-program)[Podcast

Called it (mostly): Checking in on 2026 predictions so far](https://www.sumologic.com/podcast/called-it-mostly-checking-in-on-2026-predictions-so-far)

[AI Instructions](https://www.sumologic.com/ai-instructions.md)