Application Security and Product Security are NOT the same

The security field is constantly evolving. While Application Security has been around since the early 2000s, Product Security has only gained popularity in the last 5-8 years. Is Product Security just a rebrand of AppSec? There's no universal agreement on what it actually is.

The security field, just like many other fields is constantly evolving. Application Security is nothing new, we have been talking about it since (arguably) the 1970’s, though “modern” AppSec really started to evolve in the early 2000’s. Product Security however has only started increasing in popularity in the last 5-8 years.

Is Product Security just a fresh brand on Application Security? Some certainly think so. One thing is for certain, there is no agreement on what it actually is.