Securing digital services
summary
HMRC runs a PaaS on AWS hosting 1000+ microservices (250+ customer journeys) serving ~45M taxpayers and ~5M companies with ~1500 production deployments a month and >4000 pre-prod runs. An opinionated Scala/Play stack plus Jenkins/GitHub CI lets platform teams scan dependencies in Artifactory with X‑Ray and ZAP, summarize 100k+ vulnerability rows into a catalog dashboard, and enforce blockers via Bobby. Result: rapid incident response (eg Log4Shell checks), scalable remediation, and faster secure deliveries.
AI-written summary · about
chapters (8)
- 0:00Start
- 5:00Application Security
- 8:15Microservice Architecture
- 15:14Vulnerable Dependencies
- 16:59Service Teams and the Appsec Teams
- 19:32Leak Detection
- 20:04Dependency Explorer
- 24:28Vulnerability Score
related talks
28mHow HMRC Digital secures services at scale
36mThe Road To Being Rugged
26mCase Study of Success
23mPaving a Secure Road
01h 02mTransforming IT pros to DevOps gurus: Ssecure your new tech stacks
28mMitigating OWASP Top 10 CI/CD with AWS
01h 03mContinuous Security in the Cloud
01h 00mVulnerability management at scale drives enterprise transformation