WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2023 • Aug 11, 2023

Why shifting left is so important for software developers

Jemiah Sius

Tired of reactive production firefighting? Discover how shifting left and integrating active observability directly into your IDE catches vulnerabilities before they ever reach your users.

Pause
Mute Enter Fullscreen
#1 about 7 min

Conference introduction and the importance of early planning

Planning upfront and considering accessibility saves time and prevents complex code cleanup.

#2 about 5 min

Defining shift left in modern software development

Moving performance, security, and reliability concerns to earlier stages of development reduces system errors.

#3 about 1 min

Understanding observability through a practical dashboard analogy

Observability provides real-time system performance insights without requiring manual investigation.

#4 about 1 min

Incorporating observability and security in the planning phase

Gathering comprehensive requirements and defining necessary telemetry and security protocols early prevents architectural flaws.

#5 about 4 min

Bringing security and telemetry directly into the developer workflow

Integrating observability data and vulnerability scanning directly into the integrated development environment streamlines code construction.

#6 about 2 min

Automating security and performance evaluations during the testing phase

Leveraging automation frameworks to execute vulnerability assessments and performance validation prevents production issues.

#7 about 1 min

Securing and monitoring continuous integration and deployment pipelines

Automating deployment steps and maintaining secured configurations ensures reliable incremental releases.

#8 about 2 min

Establishing feedback loops for production monitoring and analysis

Using production telemetry and security logs guides proactive issue resolution and feature prioritization.

#9 about 2 min

Embracing a continuous learning and automation mindset for DevSecOps

Adopting shared responsibilities and continuous automation practices builds resilient and secure applications.

#10 about 2 min

Leveraging generative AI for application observability and security

Applying automated assistants to system telemetry simplifies troubleshooting and vulnerability resolution.

#11 about 19 min

Audience questions on agile integration and testing environments

Integrating early observability and telemetry aligns with agile delivery without reverting to waterfall methodologies.

Matching moments

6:32 min

Embracing DevSecOps and automating the software development lifecycle

Mathias Tausig · LIVE

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

1:55 min

Expanding the shift left security journey

Ali Yazdani Ali Yazdani · World Congress 2024

1:20 min

Integrating security into the DevOps lifecycle

Reto Kaeser · LIVE

2:55 min

Rethinking shift left to avoid developer frustration

Isaac Evans Isaac Evans · World Congress 2025

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail
25:30
over 2 years ago

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail
8:52
almost 3 years ago

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Guided Memory Management: Rust's Ownership Model thumbnail
0:18
almost 3 years ago

Guided Memory Management: Rust's Ownership Model

Stefan Baumgartner

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail
30:07
almost 3 years ago

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail
25:18
almost 3 years ago

Building Reliable Serverless Applications with AWS CDK and Testing

Raphael Manke

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 24, 2026 · 14:50–15:20

Stage 1

The Era of Machine-Driven Defense is Here: Headless Security

Loris Degioanni

Founder & CTO of Sysdig

Loris Degioanni
Open session

World Congress 2026 North America

September 24, 2026 · 14:10–14:40

Stage 4

Agentic Drift: keeping pace with your agents

Colleen Lake

Colleen Lake
Open session

World Congress 2026 North America

September 24, 2026 · 10:20–10:50

Tech Leaders Stage

The New Rules of Software Delivery

Darko Mesaros, AJ Aitken, Moritz Plassnig, Akshay Shah

+1 more

Darko Mesaros
AJ Aitken
Moritz Plassnig
Akshay Shah
Open session

World Congress 2026 North America

September 25, 2026 · 11:40–12:10

Stage 2

Reinventing Testing Practices in the AI Era

Eric Deandrea

Java Champion & Senior Principal Software Engineer at IBM

Eric Deandrea
Open session

World Congress 2026 North America

September 24, 2026 · 15:30–16:00

Stage 3

The New Bottleneck in Software Development

Aditya Jayaprakash

Co-Founder & CEO at Blacksmith

Aditya Jayaprakash
Open session

World Congress 2026 North America

September 25, 2026 · 09:00–09:30

Stage 4

Don’t kill my Vibes - Simple Steps to Stay Secure when Vibe Coding

Isaac Evans

Founder & CEO of Semgrep

Isaac Evans

Related videos

DevSecOps culture thumbnail
16:00
World Congress 2023 • almost 3 years ago

DevSecOps culture

Ali Yazdani

Why Security-First Development Helps You Ship Better Software Faster thumbnail
22:18
World Congress 2025 • about 1 year ago

Why Security-First Development Helps You Ship Better Software Faster

Michael Wildpaner

You can’t hack what you can’t see thumbnail
29:34
LIVE • almost 6 years ago

You can’t hack what you can’t see

Reto Kaeser

Simple Steps to Kill DevSec without Giving Up on Security thumbnail
21:53
World Congress 2025 • about 1 year ago

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans

What Developers Get Wrong About Application Quality thumbnail
46:37
World Congress 2021 • about 5 years ago

What Developers Get Wrong About Application Quality

Chris Riley

Securing Your Web Application Pipeline From Intruders thumbnail
44:30
LIVE • almost 6 years ago

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.