A defense manufacturer's controls engineer kept deploying changes that failed security audits, forcing expensive rollbacks. Shift-left security catches these problems during development instead, saving time and preventing costly downtime.
Chapters
I think a small anecdote is a defense manufacturer we're working with where a controls engineer previously was making changes. They would deploy the changes to some system. They would then see when they come— when it comes time to do their annual audit, well, okay, I've got this change. This is not secure. We have to go back. We have to change, you know, revert this change effectively. And that's ultimately going to lead to downtime. When you think about what it would look like to shift left and how our software actually helped this end customer was they were able to understand what the security impact of their changes were going to be while they were developing them. And that's a complete mindset shift to say, well, now I'm not going to have to revert changes. Now I'm going to understand the impact on risk and safety of the changes before I actually make them and deploy them into my environment. And so really, you can think and tie it back to Well, how much time did they save by not having to revert that at the next quarterly or annual audit?