Why Design Intent needs to become part of the Inner Development Loop? I have written previously about how I think AI changes the shape of software development and one of the ideas I keep coming back to is the Inner Development Loop, or the Agentic Development Loop...call it what
It's no secret that AI is changing how software is created, but what does that mean for securing the software delivery part of the SDLC? For years, a secure SDLC has mostly assumed that meaningful security validation begins once code reaches source control. A developer writes code, commits
How DevSecOps must evolve when AI systems participate in design, code generation, and software delivery. For years, secure software development has been built around a simple assumption: Developers write the code. Most of our controls follow from that. We train engineers. We publish secure coding standards. We perform reviews, scans,
News
I’m a Product and AI Security leader working at the intersection of DevSecOps, secure engineering, and modern software development. I’ve spent most of my career helping organisations build and operate secure products by embedding security directly into the development lifecycle. My focus has always been on making security