Loading…
34
Stopped by the local defcon meetup in Dayton last month and half the room was running the same 3 free scanners
I went to a small security meetup in Dayton last month expecting to hear about some new tools. Out of about 40 people there, I counted at least a dozen laptops with the same open source dependency checker and two other free scanners running. The guy next to me said his team at a health care company pays for two big name tools but still uses the free ones for quick checks before a pull request. It got me wondering if the paid stuff is really earning its keep or if we just like the reports it spits out for management. I'm not knocking free tools, I use plenty of them myself. But it made me think most teams are stacking three or four scanners and drowning in duplicate alerts. What's the actual overlap you all see between your free and paid tools?
0 comments
Log in to join the discussion
Log In0 Comments
No comments yet
Be the first to share your thoughts on this discussion.