Building cloud security programs
summary
Wiz is deployed for agentless cloud scanning across code, pipeline and runtime and aggregates findings into a security graph database to link source secrets, CVEs and live exposures; a lightweight Wiz Defend sensor pre-processes cloud signals. Domain runs ~200 developers across 30 systems and reports 60 monthly active Wiz users and 7 million monthly visitors, with teams fixing issues proactively after onboarding. Policies surface checks at PR and CI stages, integrate into Jira, and enforce a 4-week SLO for high issues.
AI-written summary · about
chapters (12)
- 0:00Introduction and event setup
- 1:27Current attack landscape and risks
- 4:17Problems with siloed security tools
- 8:33Domain’s application security challenges
- 10:18Vulnerability management program evolution
- 13:07Domain’s development team scale
- 14:31Developer self-service and workflows
- 16:57Balancing security and development velocity
- 21:11Security champions and culture shift
- 23:38AI and security guardrails
- 25:03Application security framework
- 26:06Key takeaways and call to action
related talks
19mShielding innovation: Safeguarding cloud and AI development
45mWix’s layered security strategy to discover & protect sensitive data
28mMaximizing The Impact Of AppSec with Shift Left And AI
51mBuilding a new cloud security operating model
25mHow to Secure the AI Stack from Code to Runtime
49mContext is everything: CNAPP revolution to secure deployments (PRT254)
33mFrom Chaos to Calm: Vulnerability Management for a Dynamic, Sprawling Technology Estate
01h 01mDefendable Products: How we try to improve security in our products