Defense in Depth cover image

Defense in Depth

Securing SaaS Applications

Jul 27, 2023
Guest Steve Zalewski and the hosts discuss the challenges of securing SaaS applications, the need for a specific strategy, gaining visibility in SaaS environments, and strategies for securing SaaS applications including DNS for app discovery and operationalizing security practices.
30:33

Episode guests

Podcast summary created with Snipd AI

Quick takeaways

  • SaaS security requires a separate architectural strategy, considering both application design and non-security group involvement.
  • Continuous monitoring and sharing of security information are crucial for maintaining resilience in SaaS security.

Deep dives

The Importance of Building a Security Program for SaaS Apps

In this podcast episode, the hosts discuss the need for a specific security strategy for SaaS apps. They highlight the challenges of business-led IT and the increasing complexity of the SaaS ecosystem. It is emphasized that both the architecture of the applications and the involvement of non-security groups contribute to the security concerns. The discussion revolves around the idea that SAS should be treated as a separate environment. The hosts also mention the importance of continuous monitoring and sharing of security information by SAS vendors.

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
App store bannerPlay store banner