Platform Security
summary
Built an internal platform with three pillars: composable operations, internal developer portal, and cost/forecasting for business. Uses Kubernetes, containers, Terraform/Ansible, Jenkins/GitLab/Azure DevOps and registry image scanning to push fixes. Finds most teams ship with >20 known vulnerabilities, half suffer >3 attacks/year and 42% of breaches trace to unpatched CVEs; remediation often takes >2 months. Automates spin-up tests to validate hardening before rollout and feeds observability into security and CI/CD gates.
AI-written summary · about
chapters (9)
- 0:00Platform security introduction
- 1:27DevOps vs security gaps
- 5:01Security gaps under pressure
- 8:17Shift to DevSecOps
- 10:48Platform engineering security
- 13:59Automating security in platform
- 16:07DevOps with automated security
- 18:44Third-party supply chain security
- 20:30Q&A
related talks
43mBuilding a Secure DevOps Pipeline
18mContinuous Security - Building Security into your Pipelines
31mDevOps: You Build It, You Secure It
42mContinuous Security: Integrate security tools into your DevOps Pipeline
36mThe Road To Being Rugged
26mBuilding and Verifying Security Trust in Today’s Complex Tech Stacks ...
26mMulti-layer hardening in Kubernetes
43mSecurity in DevOps Strategies