What’s next for security, development, and CloudSec teams? (PRT063-R)
summary
Cloud native teams face concrete tradeoffs: 7.1 million developers now, growing 20% yearly, 24 million by 2025, and 95% of breaches trace to human error while teams push to production about four times a day. Full coverage needs six to twelve scanners (SAST, SCA, API, IaC, container, supply chain) which creates noise — one CI scan can return 167 "highs". Checkmarx builds Fusion and Developer Hub to correlate results, rank risk by production usage, and tell engineers where a five-minute fix truly reduces exposure.
AI-written summary · about
chapters (11)
- 0:00Start
- 2:01One happy monolith(s)
- 3:04Challenges of cloud-native development
- 5:14Security shifts all the way left
- 7:11Flexibility across the development lifecycle
- 8:12Need full coverage
- 9:09Ain't nobody got time for AppSec
- 10:57Risk management Single vulnerability
- 11:34The rise of "security champions"
- 12:21Back to the "average day" developer
- 14:40Recap
related talks
52mSecurity in Cloud-Native
46mAre Developers the New Front Line of Security?
38mSecuring the Cloud
36mThe Road To Being Rugged
13mUnderstanding DevSecOps: Risk defense across your SDLC
45mSo Happy Together: Making the Promise of DevSecOps a Reality
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
37mDevSecOps Guide to Bulletproof Your Development Workflow