WTF IS ASPM?

Summary from the TLDR InfoSec newsletter

Application Security Posture Management is a new Gartner category that refers to tools that provide everything needed to scan for and remediate vulnerabilities in an application. Broadly speaking, an ASPM should be able to track the lifecycle of a vulnerability, suggest where in the code the vulnerability can be fixed, provide a robust set of scanners, and allow for workflow creation. ASPMs typically include a subset of the following scanners: SDLC, SCA, SAST, IaC, container scanning, secret scanning, DAST, and CSPM.