Steven Zimmerman

Shift Left Becomes Shift Everywhere: Continuous Development Demands Continuous Security Testing

The development process is now so complex, so widespread, and so fast-moving that it’s difficult for enterprises to fully understand and manage it competently, much less defend effectively against attacks. Complex applications under development may require input from multiple teams that are typically unaware of one another’s activities. They may use third-party code from outside organizations that hasn’t been thoroughly vetted. And they may be written using tools, such as automation and AI, whose impact isn’t fully understood.