Gates to Guardrails

Episode 12 November 23, 2022
YouTube video

Developers don’t want to be slowed down, but security teams don’t want development speed driving AppSec posture off a cliff. The compromise: security guardrails instead of release gates. With a basis of mutual trust that only critical findings will be sent for remediation and all critical findings will be remediated, friction between teams can be mitigated. Avoiding alert fatigue is one thing both security and developer talent can agree on.