World Congress 2025 • Aug 20, 2025 • Session details

Simple Steps to Kill DevSec without Giving Up on Security

Stop playing security whack-a-mole. Shifting left shouldn't mean drowning engineers in noisy alerts. Discover how to deploy invisible guardrails that protect code without destroying developer velocity.

Starting at 4:30 · Watch from the beginning

Simple Steps to Kill DevSec without Giving Up on Security thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:30 min

Bridging the gap between developers and security tools

Bozidar Spirovski

Bozidar Spirovski +1 · Coffee With Developers

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

7:16 min

Addressing developer adoption and future software security risks

Anna Fritsch-Weninger · LIVE

2:49 min

Integrating fundamental security evaluations into agile development sprints

Bozidar Spirovski

Bozidar Spirovski +1 · Coffee With Developers

4:58 min

Scaling security teams through developer advocates

Tanya Janca · World Congress 2021

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

More from World Congress 2025

GenAI Security: Navigating the Unseen Iceberg thumbnail

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing · AWS

Behind the Code: How Women Are Powering the Future of AI thumbnail

Behind the Code: How Women Are Powering the Future of AI

Alexandra Wudel +2

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise? thumbnail

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise?

Justus Lumpe +3

AI in Leadership: How Technology is Reshaping Executive Roles thumbnail

AI in Leadership: How Technology is Reshaping Executive Roles

Bernd Datler +3

The AI-Ready Stack: Rethinking the Engineering Org of the Future thumbnail

The AI-Ready Stack: Rethinking the Engineering Org of the Future

Alex Laubscher +3

AI Sovereignty: What Does It Take? thumbnail

AI Sovereignty: What Does It Take?

Boris Hecker +3

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

AI at the Door, Turning ‘Tech Debt Panic’ into ‘Tech Debt Repairs’

Prerit Munjal

Groupon

Senior Technical Product Manager

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

Autopsy of an Autonomous Incident: When the Agent Made It Worse

Navin Pai

StackGen

Director of Engineering

Related videos

Why Security-First Development Helps You Ship Better Software Faster thumbnail

Why Security-First Development Helps You Ship Better Software Faster

Michael Wildpaner · GitLab

World Congress · 2025

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

World Congress · 2022

Security Pitfalls for Software Engineers thumbnail

Security Pitfalls for Software Engineers

Jasmin Azemović · HTEC

World Congress · 2023

Real-World Security for Busy Developers thumbnail

Real-World Security for Busy Developers

Kevin Lewis · GitHub

World Congress · 2025

Climate vs. Weather: How Do We Sustainably Make Software More Secure? thumbnail

Climate vs. Weather: How Do We Sustainably Make Software More Secure?

LIVE · Feb 2022

Software Security 101: Secure Coding Basics thumbnail

Software Security 101: Secure Coding Basics

Thomas Konrad

World Congress · 2021

Related articles

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

9 months ago

A room full of people at a tech conference

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

CS

Christina Schaireiter

Security Basics for Vibe Coders

Vibe coding has become a popular trend in the tech world. With so many tools now available for both developers and non-developers, it’s easier than ever to build projects using natural language, in...

over 1 year ago

Vibe Coding

From learning to earning

Jobs that call for the skills explored in this talk.

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Senior Incident Response Analyst

Expert $124k Remote Github Code Review Data Analysis