> Markdown version of [/events/world-congress-2025/sessions/819-simple-steps-to-kill](https://www.wearedevelopers.com/events/world-congress-2025/sessions/819-simple-steps-to-kill). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Simple Steps to Kill DevSec without Giving Up on Security


- **Date:** Friday, Jul 11, 2025
- **Time:** 12:20–12:50 (30 min)
- **Room:** Stage 4
- **Event:** World Congress 2025
- **Tags:** automation, ci/cd, cybersecurity, devops

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/1560-simple-steps-to-kill-devsec-without-giving-up-on-security)

## Description

The “shift left” movement in code security, intended to shift security responsibilities to developers, has largely failed. Instead of easing burdens, it has inundated developers with noisy alerts, straining the relationship between development and security teams, and ultimately putting the burden back on security.  This session will provide examples of how successful teams have addressed this issue and highlight the concept of using secure guardrails that notify (but don’t block) developers in their native workflow and promote the use of secure defaults. Find out how to effectively mature your application security program and steps you could take immediately to improve your security posture. 

## Speaker

### [Isaac Evans](https://www.wearedevelopers.com/@isaac-evans)

Isaac Evans Co-founder & CEO Semgrep


## Related talks at this congress

- [Real-World Security for Busy Developers](https://www.wearedevelopers.com/events/world-congress-2025/sessions/860-real-world-security) — Kevin Lewis
- [Why Security-First Development Helps You Ship Better Software Faster](https://www.wearedevelopers.com/events/world-congress-2025/sessions/844-why-security-first) — Michael Wildpaner
- [Code Red: When Your Tools Turn Against You ](https://www.wearedevelopers.com/events/world-congress-2025/sessions/510-code-red-when-your) — Aaron Bray, Julian Totzek-Hallhuber
- [Get security done: streamlining application security with Aikido](https://www.wearedevelopers.com/events/world-congress-2025/sessions/570-get-security-done) — Mia Neethling