Ep 59 - ProdSec in the Agentic SDLC, Where Security Lives When AI Writes the Code with Michael Nov

🎙️ Coffee, Chaos and ProdSec, Ep 59

AI writes most of the code now, and Cybersecurity still shows up after it ships to review it.

Cameron and Kurt join Michael Nov, Co-Founder and CEO of Prime Security, to fight about where Product Security belongs in the agentic SDLC. Cameron wants scanning inside the agent loop and out of the PR. Michael says keep control at the PR, because a developer can just type ignore.

They also get into whether developers should still learn security or whether you build guardrails around them, and who owns the fix when a vendor promised one and the breach landed anyway. Kurt's Security Architecture answer: the judge tells you to leave.

If your Application Security scanner hands you thousands of findings and no fix, this DevSecOps chaos will feel familiar.

☕ New episodes every Wednesday.

Coffee, Chaos and ProdSec -> strong coffee, stronger opinions.