It's no secret that AI is changing how software is created, but what does that mean for securing the software delivery part of the SDLC? For years, a secure SDLC has mostly assumed that meaningful security validation begins once code reaches source control. A developer writes code, commits
How DevSecOps must evolve when AI systems participate in design, code generation, and software delivery. For years, secure software development has been built around a simple assumption: Developers write the code. Most of our controls follow from that. We train engineers. We publish secure coding standards. We perform reviews, scans,
News
I’m a Product and AI Security leader working at the intersection of DevSecOps, secure engineering, and modern software development. I’ve spent most of my career helping organisations build and operate secure products by embedding security directly into the development lifecycle. My focus has always been on making security