The Boring AppSec Podcast Ep. 23 - Surag Patel and Arshan Dabirsiaghi

In episode 23, we talk to Surag Patel and Arshan Dabirsiaghi. Surag and Arshan are the Co-Founders and CEO/CTO respectively of Pixee. Pixee is a company that is fundamentally shifting the paradigm of security from detection to resolution. Their platform uses a combination of agentic AI and deterministic logic to not just find vulnerabilities, but to automatically fix them and deliver a ready-to-merge pull request. Early customers are seeing a 91% reduction in the time developers spend on fixes. This isn't just an improvement; it's a transformation.

In this episode, we discuss the transformative approach that Pixee is taking in application security. We explore the shift from traditional security tools that merely detect vulnerabilities to a model that emphasizes automated remediation. The discussion covers the evolving role of AppSec professionals, the integration of AI agents to scale coverage, the importance of trust in automated fixes, and the challenges of navigating a crowded security market. We also touch on the future of security in design specifications and the need for a comprehensive approach to security that includes all stakeholders in the software development lifecycle.

Below are some of the key takeaways from the episode.

Key Takeaways

• The traditional model of security tools is being challenged.
• Pixee aims to automate not just detection but also remediation.
• AI agents can help scale coverage in application security.
• The role of AppSec professionals will evolve with AI integration.
• Trust is crucial for developers to accept automated fixes.
• Developers want tools that reduce their workload, not add to it.
• Contextual understanding is key for accurate vulnerability triage.
• The security market is not saturated; there are still many unsolved problems.
• Integrating security into design specifications is the future.
• A comprehensive approach to security is necessary for effective risk management.

We hope you tune in and, if you like the episode, please do subscribe!