Dev Interrupted Can You Buy Your Way to DevSecOps Success? | Arcjet’s David Mytton
9 snips
Mar 11, 2025 David Mytton, CEO of ArcJet and founder of Console.dev, dives into the clash between fast-paced development and security needs. He critiques the common approach of just adding security tools, emphasizing that true success requires alignment between developers and security teams. David highlights the significance of intuitive developer-centric design and the right incentives to foster a secure culture. He also shares insights on how to market security tools effectively and empower developers to prioritize security without hindering innovation.
AI Snips
Chapters
Transcript
Episode notes
DevSecOps Incentive Mismatch
- DevSecOps, inspired by DevOps, aims to shift security responsibility left to developers.
- However, mismatched incentives between building features (developers) and mitigating risk (security) hinder its success.
Security as a Distraction
- Developers prioritize building features, often viewing security as a distraction.
- Security solutions should address developer problems, not just sell products.
Implementing Secure by Design
- Secure by design is a good concept, but implementation is challenging.
- Incentivize secure coding practices or mandate them through regulation and address liability.