DryRun SecurityGet a Demo

Resources

Browse guides, research, customer stories, webinars, and events. Evaluating code security tools? Explore the comparison matrix or browse one-on-one comparisons.

Resource library

31 resources and events

SuggestedReport

Security Scanner Bakeoff

Compare DryRun Security, Semgrep, and Aikido across 40 reachable vulnerabilities in Ruby, Java, Python, and C#. Download the 2026 benchmark report.

SuggestedWhitepaper

AI Code Security Build vs. Buy

Why every organization shipping AI-generated code needs an independent verification layer, and why building one is a permanent platform investment, not a side project.

SuggestedReport

The Agentic Coding Security Report

We had Claude, Codex, and Gemini build real applications and evaluated their results for security risks.

WebinarPast event

Full Repo Scanning with DeepScan

Join James Wickett and Zac Fowler for a live DeepScan walkthrough, full-repository security analysis, prioritized findings, and practical AppSec workflows.

· 11 AM ET

WebinarPast event

Fix It Before It Merges

Join Ken Johnson and Nic Lechner to explore pre-merge prevention with contextual security analysis, AI-assisted remediation, and branch protection.

· 11 AM ET

WebinarPast event

DryRun Wrapped Q3 Product Announcements

See DryRun Security’s Q3 product updates with founders James Wickett and Ken Johnson, including live demos and questions about AI and application security.

· 11 AM ET

WebinarPast event

The Future of AppSec, Open Source, and Your Role in the Age of AI

Join OWASP OASIS founding members and AppSec leaders for a discussion about what AI changes and what it does not. We’ll explore how AI-generated, human-validated fixes help close the gap between finding and fixing vulnerabilities, why practitioner judgment remains essential, and how open source, AI and collaboration support fixing software at scale.

· 1 PM ET

GuideV0.8

AI Software Security Maturity Model

Build a dependable AI AppSec program with AISSMM v0.8. Explore four maturity phases, independent verification, agent remediation, and organizational memory.

WebinarPast event

Coffee with the Founders Live Q&A

Bring your coffee and your questions for the third edition of AI Office Hours with the DryRun Founders, featuring James Wickett, CEO and Co-Founder, and Ken Johnson, CTO and Co-Founder.

· 11 AM ET

WebinarOn demand

Surviving AppSec in the AI Trenches

James and Ken will unpack the latest industry news, share what’s new at DryRun, and discuss what AI-driven development means for AppSec teams working to keep up with faster code creation and a rapidly changing threat landscape.

WebinarPast event

Under the Hood of the New DryRun UI

Join James Wickett, CEO and Co-Founder, and Ken Johnson, CTO and Co-Founder, for the first edition of AI Office Hours with the DryRun Founders, a new biweekly series covering the product, AI, and the changing world of AppSec.

· 11 AM ET

WebinarOn demand

From Findings to Fixes How SimpleRose Builds Developer-Trusted AppSec

Application security doesn't have a shortage of findings. It has a shortage of findings worth acting on. Join Todd Bradfute, Senior Director of Security and Technology at SimpleRose, and James Wickett, CEO and Co-founder of DryRun Security, for a conversation about bringing security into the development workflow.

WebinarRecurring series

AI Office Hours with the DryRun Founders

Join DryRun Security founders James Wickett and Ken Johnson for product demos, discussion of AI and AppSec, and live questions. Browse upcoming and past sessions.

· Every other Friday · 11 AM ET

WebinarOn demand

Ask the Experts Mythos, Agentic Code Risk, and What's Next for AppSec

In this Ask the Experts session, Cameron Walters, Alex Lynch, Ken Johnson, and Peter Karman bring together perspectives from across the ecosystem to unpack what they’re seeing in real environments. Expect direct takes, real examples, and a candid discussion on how agent-generated code introduces risk, why certain failure patterns keep repeating, and where AppSec teams should focus next.

Guide

How DryRun Security works

Get the DryRun Security overview to learn how contextual code analysis helps teams identify application risk and prioritize remediation.

WebinarOn demand

When to Use Agents vs Static Controls in AppSec

This webinar looks at a practical question many teams are facing now: when does an agent add value in security, and when is a static control the better choice?

Guide

NLCP Starter Pack

Start with 13 Natural Language Code Policies. Read the questions and backgrounds, download the pack, and adapt them to your application.

Whitepaper

Building Secure AI Applications

Explore OWASP Top 10 risks for LLM applications with a practical guide, reference architecture, and control checklist for engineering and security teams.

Report

SAST Accuracy Report

SAST tools shouldn’t just scan—they should solve for context, with accuracy. The DryRun Security 2025 SAST Accuracy Report reveals how five leading tools perform head-to-head in detecting real vulnerabilities—not just pattern matches.

Whitepaper

An AI-native Approach to Discovering Logic & Authorization Flaws

If you’re struggling with Authorization Mismatch, Authorization Bypass (e.g. IDOR, BOLA), authorization flaws, or you just can’t effectively identify complex logic flaws in modern API code, then this whitepaper is for you.

Report

Custom Policy Agent

Policies written conversationally, enforced automatically, and dynamic with your codebase.

WebinarOn demand

AI-powered AppSec

Explore the intersection of AI and application security with Ken Johnson, Co-founder and CTO of DryRun Security, as he shares our journey in utilizing Large Language Models (LLMs) for application security.