Explore a comprehensive analysis of the 2015 vulnerability landscape in this 39-minute conference talk from AppSec Ca 2016. Gain insights from anonymized data collected by the edgescan vulnerability management SaaS, covering thousands of servers and web applications worldwide. Examine emerging trends in application security, questioning traditional static approaches to dynamic problems and their diminishing effectiveness. Consider the shift towards continuous application security and the benefits of 'pushing left' in the development process. Delve into the speaker's perspective on whether the ultimate goal should be application security or risk management, and how to best protect businesses and data. Learn from Rahim Jina, Director and Co-Founder of edgescan, as he shares his extensive experience in penetration testing and operational security across various industries.