Securing Citizen Developers: A New Opportunity to Build Safe Applications
summary
Zenity’s 2024 data shows environments hosting over 79,000 applications with 39.1% year‑over‑year growth, and the top build‑time risks are authorization misuse, authentication failures, and plaintext secrets. Examples include agents that run with a single user’s credentials, unauthenticated public agents, and hard‑coded secrets; autonomous agents that send emails without filtering the From field increase runtime attack surface. Platform guardrails plus automated “silent remediation” and inventorying enable a <5‑person team to cut risk by ~90% in four months.
AI-written summary · about
chapters (8)
- 0:00Citizen development security
- 4:00Shift left challenges
- 10:21What citizen devs build
- 13:56Low-code security risks
- 17:29Reducing citizen dev risk
- 20:37Policy and collaboration
- 22:40Next steps for orgs
- 23:26Q&A
related talks
53mFlipping the Script on Application Security
44mSecurity Lessons for Early Adopters
26mBuilding and Verifying Security Trust in Today’s Complex Tech Stacks ...
45mBuilding Secure Software: Practical Strategies for Developers
40mEmbracing Security - A Changing DevOps Landscape
48mSecurity from zero
46mApplication security from start to finish
51mSure, Let Business Users Build Their Own. What Could Go Wrong?