AppSec, the New Generation: Introducing Probely's Discovery
The first rule of a truly robust AppSec program is to have a very clear understanding of what your attack surface looks like. You need to know what you have to protect in order to actually protect it: you can't protect what you don't know.