Simple Steps to Kill DevSec without Giving Up on Security
-
Isaac Evans
Semgrep
CEO & Co-founder
Security often gets ignored until something breaks, but it’s a real part of our job as developers. This talk will show specific ways to add security checks and automation at every stage of development: in your editor, during code review, and after deployment. We’ll cover the main security problems developers actually face - like vulnerable dependencies, unsafe code, and leaked keys - and walk through how GitHub’s security tools work in practice. If you write or review code and want to catch issues earlier, this talk is for you.
World Congress 2025
Isaac Evans
Semgrep
CEO & Co-founder
Joseph Katsioloudes
GitHub
Senior Developer Advocate
Aaron Bray
Veracode
Director of Product Management
Julian Totzek-Hallhuber
Veracode
Senior Manager Solution Architects
Michael Wildpaner
GitLab
VP of Engineering, Security