BSidesSF 2026 - From Noise to Notes: Orchestrating SAST with Developers... (Adrián Puente Z.)

This talk, led by Adrián Puente Z., focuses on the implementation of Static Application Security Testing (SAST) beyond just tool selection. The speaker discusses strategies for minimizing noise, fostering trust among developers, and evaluating the effectiveness of security practices. Furthermore, the session delves into how AI-driven remediation techniques, such as Vibe Security Patching, can effectively transform identified security issues into actionable fixes, ultimately speeding up the secure software delivery process.