Maintaining Agility and Security without Impacting Developer Experience
summary
Claims that embedding security into the pipeline and consolidating toolchains measurably reduces friction and speeds delivery, with survey evidence: about 5,000 respondents, 74% of security pros have shift left or plan to, 71% report developers find ≥25% of vulnerabilities (up from 53%), average app uses >500 open source components, 85% run 2–10 tools and 40% spend 25–50% of their time integrating them. Concrete actions: add automated scans and SBOMs (software bill of materials) into commits, use a single value stream platform to unify workflows and cut context switching.
AI-written summary · about
chapters (8)
- 0:00Introduction and speaker background
- 4:56Bad experiences and developer pain points
- 8:43Balancing agility security and cost
- 10:29Shift left security benefits
- 15:00Securing open source dependencies
- 18:30Tool chain sprawl and consolidation
- 23:00Value stream platform approach
- 24:43Summary and key takeaways
related talks
40mDevSecOps Guide to Bulletproof Your Development Workflow
19mApplication Security at High Velocity
30mThe 3 Ways of DevSecOps – Making Shift Happen
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
01h 04mShifting Security Everywhere
42mContinuous Security: Integrate security tools into your DevOps Pipeline
54mScaling Security in Agile Scrum
47mSecurity is Everybody's Job