Application security posture management, or aspM, is being discussed in terms of validating risk and reducing alert noise. There are guides and explanations available on the topic, including a devsecops guide for securing the software development life cycle. Additionally, a company called Invicti has acquired another company, Kondukto, with the goal of delivering proof-based application security posture management.