Traditional security methods have been unable to keep up with hackers in today’s changing application environment. The success of improved network security products together with the increased attack surface available from modern applications has meant that hackers have started to mount increasingly numerous and sophisticated attacks on applications. This paper outlines some of the reasons why conventional application security is simply not in the same league as today’s hackers, and introduces a radical new approach that offers an elegant solution to a significant part of the problem. The benefit of application security as a service will be learned by the reader.”]