Doing More with Less: DevSecOps on a limited budget
summary
Argues that limited DevSecOps budgets force prioritization and shows concrete results: an automation called secret validator that runs regex and API probes to validate millions of scanner hits, uses confidence heuristics (for example 98% confident when ID and key appear one line apart) and reprioritizes valid secrets to critical, saving analyst time; a two–three year security Warrior program with six‑week cadence that embeds security into teams and reduces costly rework.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:53DevSecOps fundamentals
- 6:07Cost challenges
- 9:20Cost analysis
- 13:38Budget optimization
- 21:07Automating secret validation
- 26:45Security Warrior program
- 28:32Q&A
related talks
30mThe 3 Ways of DevSecOps – Making Shift Happen
33mSecurity on a Shoestring: A Low-Budget Security Revival Tour (Jared Casner)
31mDevSecOps, or How to Integrate Security into DevOps Practices
30mEffective security on a tight budget
49mLessons from DevSecOps Trenches
32mHow to fit Sec into DevOps without Security team
31mDevOps: You Build It, You Secure It
34mDevSecOps: How to Use DevOps to Make You More Secure