Invisible Guardrails: Enabling Developer Velocity With a Secure Platform - James Elías Sigurðarson & Vignir Hafsteinsson, Asana
Abstract
Security is often seen as a brake—a necessary friction that slows down development. But what if the platform itself could make you fast and secure? At Asana, we built our platform security model around one core principle: the fastest path for a developer must also be the most secure path. We achieved this by building invisible guardrails directly into the platform, automating security to the point where it gets out of the developer’s way. We will share how we built security functionality into our platform using frameworks such as Crossplane and Cilium, enabling developers to seamlessly take responsibility for the security of their services. We’ll show you how this developer-centric security model works in practice, and how this resulted in a high-trust environment where developers are empowered to move quickly, with confidence that the platform provides a secure foundation by default.