Nico Waisman

Nico Waisman, a seasoned security leader and former CISO at Lyft, dives into the innovative world of LLM-driven pentesting, focusing on Expo's impressive results on bug bounty platforms. He explains how LLMs can identify flaws at scale using feedback loops and the importance of real-time validation to reduce false positives. Nico also discusses handling hallucinations as an asset, scaling tests with precision, and the interplay between LLMs and fuzzing. Finally, he highlights the need for human oversight in assessing vulnerabilities to enhance application security.