20 Years of AppSec: What AI Changes, and What It Doesn't
Two decades of secure coding, SAST, DAST, and Shift Left, and the same vulnerability classes still reach production. A practitioner's view of what AI genuinely changes in application security, and what stays the same now that both code and attacks run at machine speed.
- Why the same vulnerability classes still reach production after 20 years of AppSec tooling.
- What SAST, DAST, and Shift Left actually fixed, and what they never touched.
- What breaks differently now that both code and attacks run at machine speed.
- Where AI-native testing adds real depth, and where it is a scanner with an AI label.




