We all know that application security is important, but many times securing an application, especially an existing one, can seem like a daunting task. Where do you being? What's the most vulnerable to attack? What are the best options for risk mitigation? What is risk mitigation? Do we all need to secure our applications in the same way? Let's talk about these questions and more.