Shifting Security Tools Left for Safer Apps
Shifting Security Tools Left for Safer Apps “Shifting security left” is not a new concept and is one that many technologists understand at a high level. It means implementing security policies and controls at early stages of the software development process and not just when apps go into production. Shifting security left requires your application developers and DevOps teams to consider security an integral part of their apps and processes (and in particular to test it at all phases of the CI/CD pipeline), and as a result fundamentally strengthens the security of your apps when they reach production. Despite the agreement on what shifting left means, controversy arises when the conversation turns to which tools and approaches are best suited to the task. Much of the public discussion focuses on tools for code scanning and automated patching, or on new [ more… ]