WHAT’S IN IT FOR APPSEC?
Enhanced vulnerability information helps security become a better partner with the development teams by providing real world insight into the vulnerabilities that are being actively exploited and could potentially lead to a costly post-release patch if not addressed.
Instead of handing down a huge list of issues and saying, “Ok, you need to fix all of these,” you can partner with development to strategically address the issues that have a high probability of being exploited without adding to tech debt.