Emil Albrektsson, NAV

Emil Albrektsson

Applications generate hundreds of vulnerability alerts, but which ones actually matter? Nav’s AppSec team built TPT (Titt på Ting), an open-source tool that helps remediate this problem using free data sources. In this talk, I’ll share how we transformed overwhelming vulnerability backlogs into actionable, prioritized workflows. Learn about our risk-scoring approach, how we aggregate data from multiple free sources, and the UX principles that help developers prioritize.

Open Source Security Foundation
OWASP Foundation
Open regulatory compliance working group (ORCWG.ORG)