When dealing with the challenges of engineering, it is imperative to confront the hard truths embedded within AppSec practices. In this talk will discuss the human element of application security bringing in the indispensable role of education, culture, and accountability. Drawing upon real-world case studies and industry insights, by confronting uncomfortable truths surrounding developer practices, organizational inertia, and the limitations of technology, participants will be empowered to implement pragmatic solutions that prioritize security without stifling innovation.