5 Comments
User's avatar
Alex stone's avatar

For ADR, which technical approach do you recommend more? Do you prefer library-based ADR or network-based ADR?

James Berthoty's avatar

Hey! I think library based is much more impactful for security and vulnerability prioritization, but network based is better for a higher level attack surface kind of view of your application. To me, that makes library based much cooler.

Alvaro Del Hoyo's avatar

Shouldn’t ITDR be at the top users layer too?

Diego Cordero's avatar

How do you feel about Wiz Sensor for Runtime protection?

James Berthoty's avatar

It's a competitive detection offering that also has some early ability around tying workload and cloud events together, but it lacks the application layer insights that in my mind are essential for context and false positive reduction.