Reinventing the Secure Development Lifecycle

As the owner of product risk for large engineering groups at Microsoft, Idan was responsible for prioritizing, remediating and communicating risk to upper management. He had a daily challenge in doing so because the existing security and compliance tools and processes are mostly manual and periodic, with a 'developers-last' approach. Yonatan, who led engineering teams at Microsoft, experienced holdbacks and slowdowns in product delivery, in order to integrate controls and satisfy risk management demands. Idan and Yonatan realized that existing processes around secure SDLC, while well-established for waterfall methodology, don’t work with agile. Especially when developing applications and infrastructure across on-premises and multicloud. Together, they founded Apiiro to reinvent secure development lifecycle for modern, agile development teams and bridging the gap between CISOs & CIOs.