Explore the realities of application security at GitHub in this 49-minute conference talk from LASCON. Delve into the perception of GitHub as an "AppSec Fantasyland" and discover the truths and misconceptions behind this notion. Learn about the innovative approaches implemented to enhance AppSec practices and "make AppSec suck less." Gain insights into the ongoing challenges faced in striving to create an ideal AppSec environment. Uncover the complexities of maintaining robust security measures in a dynamic tech landscape and understand the continuous efforts required to bridge the gap between fantasy and reality in application security.