I had a chance to talk with lots of ThreadFix users as well as the vendors and project maintainers whose tools we integrate with at the Open Source Showcase as well as around the conference. Lots of great feedback and feature requests we'll be rolling into our upcoming releases.
Tuesday and Wednesday I ran a training class "Building a Software Security Program on Open Source Tools" I had a great set of attendees who were very willing to share their experiences rolling out various commercial and open source tools as well as their successes and failures implementing parts of their software security programs.
Josh Sokol and I gave an updated version of our talk "The Magic of Symbiotic Security: Creating an Ecosystem of Security Systems" and the slides are online here:
I believe next year's US-based AppSec is slated to be held in New York City. I have every confidence they'll put on a great show and they'd better bring their A-game because the Austin folks really knocked the 2012 AppSecUSA conference out of the park.
Contact us if you wanted to follow up after OWASP AppSecUSA in Austin, TX.