Enterprise AppSec SAST tooling can be expensive, leaving startups, independent developers, and cash-strapped security teams below the "AppSec Poverty Line." This talk demonstrates a demo on how to bootstrap your security program from day one by building a free, local-first, LLM-assisted SAST tool. Let us look at how to use lightweight Large Language Models (LLMs) running on local infrastructure as a foundational starting entry point for early vulnerability discovery. The goal isn’t replacing enterprise SAST. The goal is to show how AppSec practitioners can quickly convert security knowledge into working automation while keeping source code private and fully within organizational boundaries. Attendees will leave with a practical framework to spin up an immediate, zero-dollar security baseline when commercial tools are out of reach.
About the Presenter: Monish Alur Gowdru
N/A
