Blog
/
Authors
/
Renny Shen

Author Profile

Renny Shen

Senior Director, Product Marketing

at
Harness

Renny Shen is a 25-year veteran of the technology industry and has deep experience both building and marketing a broad range of products and solutions. His career has run the gamut from scrappy startup to 800-pound gorilla, including stints at F5 Networks, Akamai Technologies, and Checkmarx. Renny currently runs product marketing for Harness's security products

Connect on LinkedIn

Latest from

Renny Shen

A pinned write-up worth starting with.

Featured

Static Application Security Testing

AI Agent Security: Applying the OWASP Top 10 Across the Software Development Lifecycle

Learn how to secure AI agents across development, testing, deployment, and runtime using the OWASP Top 10 for Agentic Applications.

Renny Shen
+ more
November 4, 2026
7 minutes to read
Read the article
AI Agent Security: Applying the OWASP Top 10 Across the Software Development Lifecycle

All posts by

Renny Shen

All
Engineering Blog
Technical
Operations

Technical

What is Interactive Application Security Testing (IAST)?

Interactive Application Security Testing (IAST) finds vulnerabilities in running applications by monitoring code from the inside. Learn how it works and where it fits.

September 30, 2026
6 minutes to read
What is Interactive Application Security Testing (IAST)?
No items found.

Technical

AI Agent Security: Applying the OWASP Top 10 Across the Software Development Lifecycle

Learn how to secure AI agents across development, testing, deployment, and runtime using the OWASP Top 10 for Agentic Applications.

November 4, 2026
7 minutes to read
AI Agent Security: Applying the OWASP Top 10 Across the Software Development Lifecycle

Technical

Web Application Security Testing: Types, Tools and Best Practices

Web application security testing finds vulnerabilities before attackers do. Learn the types (SAST, DAST, IAST), tool criteria, and best practices.

October 30, 2026
7 minutes to read
Web Application Security Testing: Types, Tools and Best Practices

Technical

Mobile Application Security Testing (MAST): Methods, Tools and Best Practices

Mobile application security testing finds flaws in your app and its SDKs before release. Learn MAST methods, iOS/Android risks, and tool criteria.

October 26, 2026
8 minutes to read
Mobile Application Security Testing (MAST): Methods, Tools and Best Practices

Technical

SAST vs SCA vs DAST vs IAST: choosing the right scan for the right stage

SAST vs SCA vs DAST vs IAST: a clear breakdown of what each scan finds, when to run it, and how to combine them across your SDLC.

September 30, 2026
4 minutes to read
SAST vs SCA vs DAST vs IAST: choosing the right scan for the right stage

Technical

What is Interactive Application Security Testing (IAST)?

Interactive Application Security Testing (IAST) finds vulnerabilities in running applications by monitoring code from the inside. Learn how it works and where it fits.

September 30, 2026
6 minutes to read
What is Interactive Application Security Testing (IAST)?

Technical

LLMScanBench Q3 2026: Choosing the Right Approach for AI Vulnerability Discovery

Compare LLM vulnerability scanners with AI SAST on precision, recall, speed, cost, and consistency to choose the right AI security approach.

September 28, 2026
12 minutes to read
LLMScanBench Q3 2026: Choosing the Right Approach for AI Vulnerability Discovery

Technical

Vulnerability Remediation vs Mitigation: The Difference

Vulnerability remediation vs mitigation: clear definitions, when to choose each, and how both fit inside a risk-based vulnerability management program.

September 23, 2026
5 minutes to read
Vulnerability Remediation vs Mitigation: The Difference

Technical

AI DevSecOps: how machine learning is reshaping the secure SDLC

See how machine learning is changing secure SDLC practices, from AI-assisted code review and finding triage to new risks like model supply chain attacks.

September 18, 2026
7 minutes to read
AI DevSecOps: how machine learning is reshaping the secure SDLC

Technical

AI SAST Explained: Why Traditional Application Security Is Reaching Its Breaking Point

Learn how AI is transforming SAST, reducing security friction, and helping teams secure AI-generated code without slowing delivery.

August 5, 2026
4 minutes to read
AI SAST Explained: Why Traditional Application Security Is Reaching Its Breaking Point

Technical

Zero Day to Fix: Why Security Response Speed—Not Discovery—Is Your Real Bottleneck

AI finds vulnerabilities 10x faster. Here's why response speed, not discovery, is the bottleneck keeping your organization exposed to zero-days and why security at machine speed is now required.

August 6, 2026
5 minutes to read
Zero Day to Fix: Why Security Response Speed—Not Discovery—Is Your Real Bottleneck

Technical

Shift Left, Protect Right: How Harness + Wiz Close the AppSec Gap

Unify code and runtime security with Harness and Wiz. Correlate findings, prioritize real risks, and fix vulnerabilities faster across the SDLC.

April 28, 2026
5 minutes to read
Shift Left, Protect Right: How Harness + Wiz Close the AppSec Gap

Technical

Securing AI and Securing With AI: AI Security from Code to Runtime With Harness

Harness launches AI Security and Secure AI Coding to discover, test, and protect AI-native apps and AI-generated code across the DevSecOps lifecycle.

March 17, 2026
7 minutes to read
Securing AI and Securing With AI: AI Security from Code to Runtime With Harness

Technical

What Is Application Security Testing?

Application Security Testing is the practice of scanning various aspects of an application throughout its development lifecycle for the purpose of uncovering and remediating known vulnerabilities, thus strengthening the application’s security posture.

September 30, 2026
3 minutes to read
What Is Application Security Testing?
No items found.

More voices from the Harness team

Engineers, security leads, and platform folks worth following.

All authors
Julie Herd
Julie Herd

Director, Product Marketing - Cloud Cost Management