How I got a performance-driven team to care about security

Estimated reading time: 4 minutes

Key takeaways:

• Reframe security as performance resilience: shift the mindset from performance versus security to performance through security.
• Embed security into existing performance workflows: security checks can be integrated directly into performance testing and CI/CD automation.
• Drive cultural adoption through shared ownership and automation: align teams around common goals, promote cross-team learning, and automate security validation.

Performance testing can sometimes take precedence over security testing, especially when teams are measured by throughput, latency, and uptime.

However, this performance-centric mindset can inadvertently create security gaps.

Recognizing the cultural gap

The initial challenge was not technical but cultural.

Join LeadDev.com for free to access this content