How to Secure Thousands of Web Applications at Once
summary
The talk explains how to protect thousands of web applications at once by using CI/CD integrations and security automation to reduce manual work. It describes practical techniques to offload security engineers and enforce a consistent level of protection across many apps without testing each one manually.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:24Security scalability problem
- 4:59Wellit paths solution
- 6:26Content Security Policy in practice
- 8:39Automatic context escaping
- 11:10Blocking dangerous code
- 13:41Safe HTML conversion
- 17:56Code security review
- 21:05Trusted Types in browser
- 23:54Sandboxing legacy apps
- 26:25Wellit paths results
- 28:10Security mechanisms summary
- 31:46General security approach
- 34:14Recommendations and conclusions
- 35:16Q&A
related talks
29mSecuring Your Web Application Pipeline From Intruders
26mBeyond Testing: Application Security in the Age of DevOps
52mApplication Security at DevOps Speed and portfolio scale
07mInterview
45mHow Leading Companies Are Scaling Their Security
13mEffective Application Security Testing for DevOps
48mCI/CD Security
49mStop Chasing Vulnerabilities - Introducing Continuous Application Security