The State of the Union of DevSecOps
summary
Overview of current state: industry adoption shows Gartner: 20–50% adoption and strong vendor growth (unicorns like Snyk), but real gaps remain — tooling shifts to developers with SAST and DAST integrated into GitHub/GitLab while orchestration is missing, false positives and audit friction persist, and workforce demand outstrips supply with 6,400 jobs and ~8,400 LinkedIn postings; only 13% access to DAST results for developers. Next steps focus on adversary management, security observability, OKRs and measurable resilience.
AI-written summary · about
chapters (14)
- 0:00Start
- 4:48Alignment
- 10:13Early Mainstream
- 16:23Workforce Investment
- 17:46Failures
- 17:59Upskilling & Career
- 20:58False Positives
- 22:24Audits
- 24:18Epic Battles
- 25:27Language
- 29:16Adversaries
- 30:13Perfectionism
- 31:07Measurement
- 31:57What's Next?
related talks
30mDevSecOps State of the Union
32mDevSecOps is Dead, Long Live DevSecOps
53mDevSecOps Next: Navigating the Next Era with Industry Titans
15mKeynote: The Rise of DevSecOps
45mSo Happy Together: Making the Promise of DevSecOps a Reality
31mDevSecOps, or How to Integrate Security into DevOps Practices
41mWhat Is Devsecops? Key Steps to Do It Well
45mDevSecOps : add Security to your DevOps!