Welcome to the Runtime Era & the Rapid Shift in AppSec 📈
In this episode of And Security For All, host Kim Hakim sits down with Jeff Williams, Founder and CTO of Contrast Security, for a deep dive into why application security is undergoing its most dramatic shift in decades.
Jeff shares his journey from helping create the OWASP Top Ten to building one of the leading runtime application security platforms, and explains why traditional AppSec approaches are no longer keeping up with modern software development.
🎙️ In this episode, we cover:
- Why 2026 is shaping up to be the year of runtime security
- How traditional AppSec tools create noise instead of clarity
- What runtime security reveals that static and perimeter tools cannot
- Where AI truly helps in AppSec—and where the hype falls short
- How European regulatory changes are redefining software liability
- Why security teams must prioritize context over volume
- What developers, CISOs, and security leaders should focus on next
This conversation breaks down complex topics like runtime protection, AI-driven remediation, regulatory pressure, and developer enablement into clear, practical insights for today’s security practitioners.
Whether you’re a CISO, AppSec leader, developer, or security architect, this episode offers a forward-looking perspective on how application security is evolving—and what it takes to stay ahead.