cloud tools

In episode 76 of the We Hack Purple Podcast host Tanya Janca brings Anshu Bansal, the CEO of CloudDefense.ai, back onto the show for a second time to discuss “solving problems in application security”. Tanya and Anshu have worked together quite a while, as Tanya has been an advisor at Cloud Defense since it was a drawing on the back of a napkin!

We choose this topic because Anshu recently spoke at the OWASP Bay Area meetup chapter, and he told Tanya his talk was about "solving the AppSec problems”. Obviously, she had to hear more about this. They dove into Anshu’s definition of false positives (the traditional meaning, plus legit vulnerabilities that aren’t reachable or otherwise do not cause business risk), as well as how to prioritize issues in way that makes more sense for the business. He simplified a lot of ideas that sometimes technical folks struggle with, such as how to get your message across to the business so that they agree to fix what matters most.

More Anshu!

• Anshu generously offered to connect with any of our listeners on LinkedIn: https://www.linkedin.com/in/anshubansal/
• He’s part of the Cloud Defense blog https://www.clouddefense.ai/blog
• They also have a Newsletter https://www.clouddefense.ai/contact

Very special thanks to our sponsor: Semgrep!

Semgrep Supply Chain’s reachability analysis lets you ignore the 98% of false positives in open source vulnerabilities and quickly find and fix the 2% of issues that are actually reachable. 

Get Your Free Trial Here! 

Semgrep also makes a ludicrously fast static analysis tool They have a free and paid version of this tool, which uses an open-source engine, and offers a community-created rule set! Check out Semgrep Code HERE


Join We Hack Purple!

Check out our brand new courses in We Hack Purple Academy. Join us in the We Hack Purple Community: A fun and safe place to learn and share your knowledge with other professionals in the field. Subscribe to our newsletter for even more free knowledge! You can find us, in audio format, on Podcast Addict, Apple Podcast, Overcast, Pod, Amazon Music, Spotify, and more!

The workflow of the L&D professional has changed significantly over the years. Our design processes may not have changed much, but the tools we use have. One of the most obvious improvements has come from the internet economy giving us Software-as-a-Service or SaaS product.

Today we’re chatting with Mark Sheppard about how he manages his L&D workflow strategy. We will be discussing how you can take advantage of “sharing” features and collaborative team features. And of course, we’ll be sharing our lists of favourite SaaS based L&D productivity apps. So bring your list, so that you can be a part of the sharing.

Mark is a Canadian L&D professional. He has been an instructional development officer, training coordinator, member of the eLearning Guild Advisory Board and a learning and leadership consultant.

Become virtual friends with the IDIODC gang on twitter. Remember you can always stay in the loop by searching through the #IDIODC tag: https://twitter.com/search?q=%23IDIODC&src=typed_query&f=live

Mark: @MarkLearns https://twitter.com/marklearns

Brent: @BSchlenker https://twitter.com/bschlenker

Chris: @Chris_V_W https://twitter.com/Chris_V_W

IDIODC: @TeamIDIODC https://twitter.com/TeamIDIODC

Brent Schlenker is dominKnow's Community Manager. Chris Van Wingerden is dominKnow's Sr. VP Learning Solutions.

Interested in learning more about dominKnow? Sign up for our next live platform demo to learn why we do powerful eLearning-authoring best. (And get a free 14-day trial after you watch the demo!) https://www.dominknow.com/demonstration.html