The Role of AI in Modernizing Enterprise Application Security
Modern enterprise apps are sprawling, fast moving, and AI accelerated, yet traditional testing cannot keep up. Watch this session to learn how AI assisted, expert led testing expands security coverage at scale, improves consistency, and strengthens protection across complex enterprise application portfolios.
Enterprise application portfolios aren’t just large; they’re sprawling, fast-moving, and deeply interconnected. Hundreds or thousands of applications. Shared services and APIs. Distributed ownership. AI-accelerated code velocity.
Traditional testing models weren’t built for this reality, leaving many enterprises constrained due to resource and budget limitations to how many applications they can assess, how deeply they can test them, and how consistently they can apply methodology across their portfolio.
In this session, we share what we have learned from testing complex, large enterprise environments and how modern AI-assisted testing can meet enterprise expectations and expand security capacity without compromising depth or quality.
Session Summary
Zach Moreno and Jon Yarema explore the role of AI in modernizing enterprise application security, focusing on the growing complexity of enterprise environments and the limitations of traditional security approaches. They discuss challenges such as large application portfolios, legacy systems, distributed ownership, and noisy security data. They highlight how AI, particularly agent-based approaches, can act as a force multiplier to scale testing, improve prioritization, and analyze large datasets. The session emphasizes that AI enhances, rather than replaces, human expertise, with the most effective approach being a human-in-the-loop model that combines automation with expert validation.
Key Takeaways
- Enterprise environments are increasingly complex, with hundreds of apps, legacy systems, and distributed ownership.
- Traditional security testing struggles to scale across large and evolving application portfolios.
- AI is a force multiplier, helping teams analyze data, prioritize risk, and expand coverage.
- Agent-based AI can automate testing tasks but requires clear instructions and strong methodology.
- Human expertise remains critical—AI augments, not replaces, security professionals.
- The biggest value of AI is in summarization, correlation, and prioritization of large datasets.
- A human-in-the-loop approach provides both scalability and confidence in result.
This session is designed for CISOs, AppSec leaders, and security teams responsible for securing large application portfolios. If you’re navigating scale, velocity, and increasing architectural complexity and looking for a pragmatic way to strengthen coverage across your enterprise, this session is built for you.
