Get started with Dev SecOps: insights from Aleksandr Krasnov - Product Security Engineer
Summary: PortSwigger interviewed Aleksandr Krasnov, a product security engineer at Dropbox, on how organizations can start with DevSecOps, and cited a PortSwigger customer survey in which 42% of large enterprise organizations sampled were investing in accelerated software delivery. Krasnov's first tip is to scan your web estate to find security holes and prioritize fixes, and he argues organizations need not pass through DevOps first, treating initial scans as an MVP approach.
What's compelling: Krasnov's point is that the gaps are already there whether or not you have looked - every web app has these holes, and the only question is whether you have found them before someone else rattles the window catches.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026