Security at the speed of innovation: Defensive development for a fast-paced world
summary
Lessons from startups and banks about concrete practices that scale with velocity: adopt pull requests workflows with automated security checks, add lightweight static analysis and dependency scanning in CI, and require small, audited libraries to reduce blast radius. The talk contrasts what worked at large organizations (formal reviews, gatekeeping) versus startups (fast feedback, checklists), claims no silver bullet, and promotes hacker-resilient code and teaching application security at Tumblr as practical outcomes.
AI-written summary · about
related talks
27mSecurity Learns to Sprint: DevSecOps
32mThe Art of Secure Architecture
40mMaking Security an integrated part of the SW Dev Lifecycle
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
38mKeynote: Dumping Traditional Security Teams
53mPractical tips for web application security in the age of agile and DevOps
58mBalancing Security and Agility While Scaling Your Company
36mHow to build continuous security and embed it in your product