Episode 5

A frequent release cadence has myriad benefits: faster delivery to market for new functionalities, and swiftly-improving accuracy toward goals (what we call Agile) chief among them. And from a security perspective, a quick reaction time to zero-day threats thanks to a well-oiled assembly line is invaluable. But, of course, there are drawbacks: like a lack of cohesion/communication between security and dev teams, and unequal pressure on AppSec to quicken their side of SLAs. We found out in The State of AppSecOps Report the ship cycle sweet spot is 1-2 weeks (most often 2), wherein security can be effectively balanced with engineering initiatives.