Скачать или смотреть Shift-Left, Agentless Cloud Security, and AI-Native AppSec | AppDevANGLE

67% of organizations say security slows down their release cycles—and nearly 60% of cloud breaches in 2025 are tied to misconfigurations or gaps introduced during rapid development.
In this episode of AppDevANGLE, Paul Nashawaty sits down with Gil Geron, CEO and co-founder of Orca Security, to unpack how teams can secure cloud-native applications without sacrificing developer velocity.
We dive into:
Why “shift left” actually speeds you up when done right
How agentless, graph-based cloud security closes visibility gaps across AWS, Azure, GCP, Alibaba Cloud, Oracle Cloud, and more
Why context (data sensitivity, exposure, blast radius) is the new foundation of effective security
How AI and AI-native applications will reshape DevSecOps and secure-by-default delivery
If you’re working in AppDev, DevOps, platform engineering, or cloud security, this conversation breaks down the practical patterns for balancing speed and safety in modern cloud environments.

Key Highlights
The release velocity vs security control gap: 67% say security slows releases; misconfigurations still drive most cloud breaches
Why microservices and serverless architectures widen visibility gaps between Dev and Sec
“Shift left” as a speed enabler, not a drag—catching security issues in design and build instead of production
How Orca’s agentless, API- and graph-based approach reduces operational overhead and increases coverage
Why 50% agent coverage in many production environments is a serious risk
Using context (internet exposure, PII reachability, lateral movement) to prioritize what actually matters
The role of telemetry consolidation in reducing noise and focusing on high-risk data paths and services
How AI agents can embed security policies into development workflows and automate code reviews
Human-in-the-loop as the bridge between AI-driven guardrails and real-world risk management


00:00 - Intro
00:07 - Navigating Cloud Security: Challenges, Innovations, and Strategies
02:26 - Enhancing Business Agility through Architectural Visibility and Operational Velocity
04:31 - Shifting Left in Security to Improve Velocity
07:19 - Exploring Agentless Cloud Security
11:34 - Context and Telemetry in Security Alerts
14:30 - The Role of AI in Future Application Security
17:21 - Final Thoughts: Enhancing Collaboration and Speed