PLAY PODCASTS
Security as Code: Building Developer-First Security Tools with David Mytton
Episode 10

Security as Code: Building Developer-First Security Tools with David Mytton

Tech on the Rocks · Kostas, Nitay

December 19, 20241h 3m

Audio is streamed directly from the publisher (media.transistor.fm) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.

Show Notes

In this episode, we chat with David Mytton, founder and CEO of Arcjet and creator of console.dev. 

We explore his journey from building a cloud monitoring startup to founding a security-as-code company. David shares fascinating insights about bot detection, the challenges of securing modern applications, and why traditional security approaches often fail to meet developers' needs. 

We discuss the innovative use of WebAssembly for high-performance security checks, the importance of developer experience in security tools, and the delicate balance between security and latency. 

The conversation also covers his work on environmental technology and cloud computing sustainability, as well as his experience reviewing developer tools for console.dev, where he emphasizes the critical role of documentation in distinguishing great developer tools from mediocre ones.

Chapters

00:00 Introduction to David Mytton and Arcjet
07:09 The Evolution of Observability
12:37 The Future of Observability Tools
18:19 Innovations in Data Storage for Observability
23:57 Challenges in AI Implementation
31:33 The Dichotomy of AI and Human Involvement
36:17 Detecting Bots: Techniques and Challenges
42:46 AI's Role in Enhancing Security
47:52 Latency and Decision-Making in Security
52:40 Managing Software Lifecycle and Observability
58:58 The Role of Documentation in Developer Tools

Click here to view the episode transcript.

Topics

security as codebot detectionWebAssemblydeveloper experienceDevToolsArcjetconsole.devcloud securityweb securitydeveloper toolsdocumentationenvironmental technologycloud computing sustainabilityserverless securityAPI securitysecurity engineeringbot protectionsecurity automationdeveloper-first securityreal-time security