Summary
This document is a technical report that discusses the implementation and customization of the Application Security Posture Management (ASPM) system. It outlines the daily routine of an Application Security professional, detailing the use of various scanners and the validation of vulnerabilities. The report describes the challenges faced during the integration of ASPM, including the need for programming skills and the lack of customization options in existing tools. It presents a narrative of the integration journey, highlighting the discovery of ASPM as a solution and the subsequent issues encountered, such as the discontinuation of the product by a larger company. The report emphasizes the importance of customization and the ability to adapt security tools to specific organizational needs. It also mentions the use of no-code solutions and headless CMS for better asset management and visualization, concluding with reflections on the necessity for flexibility in security tool implementation.
