Anthony Fielding (antfie)

Anthony is a cyber security consultant (AKA ethical hacker, penetration tester), with a software engineering background. He specialises in DevSecOps to empower teams to take ownership of the security of their products early in the development process. He does this by delivering training and through security consultancy. He is available for hire to undertake security assessments, consultancy and contracting opportunities.

  1. Blinded by the Tooling

    DevSecOps (also referred to as shifting-left) is the practice of training and empowering the engineering team to identify and fix security defects earlier in the development process. Typically security assessments (penetration tests) are performed just before a code release is due to be deployed into production. This is not very agile and any serious issues found can disrupt delivery roadmaps. By adopting DevSecOps fewer issues are expected to be found during regular security assessments, meaning any remedial work should be easier and cheaper to implement. If your organisation is pursuing DevSecOps, great stuff.

    Read more...