+DevOps Release code to market faster Traditional release 1-2x annual fails at cloud scale DevOps tooling, microservices architecture allow independent releases DevOps culture grew organically as Dev and Ops teams learned to work harmoniously. DevSecOps Newer thinking - security integration to DevOps processes, AppSec integration to pipelines improved code security But developers are still incentivized to get features to market fast Ops teams are incentivized for uptime and keeping dev teams moving Security teams are incentivized to reduce risk, in opposition to above objectives. Risk reduction slows development, blocks code release due to late stage vulnerability discovery. Shift left moves discovery earlier, but security teams are already stretched thin. API security is behavior based, not traditional code security discoverable, so how do you add this?
0 commit comments