As many as a third of serious vulnerabilities could be in web applications. But securing web apps, APIs and web-based interfaces is a challenge.

In this episode, we look at why vulnerabilities have seen a steady uptick over the last few years, how identifying and securing vital web applications is essential to enterprise security, and why a fixation on technical CVEs does little to boost defences.

Plus, why both security pros and reporters like a pie analogy.

Our guest is Alex Kreilein, vice president for product security at Qualys. Interview by Stephen Pritchard.

Listeners can also view the Qualys research on the firm's blog.