The AppSec Program I Regret Building

This talk is a postmortem of a well-intentioned but ultimately failed Application Security program -- led by a solo AppSec engineer who tried to do everything, too fast, without consensus. It’s not a case study in success. It’s a breakdown of how security can go wrong even when the ideas are sound, the tooling is industry-standard, and the motivation is genuine.