Most teams meet security as a step near the end: a review, a scan, a list of findings that arrives when the work is almost done. By then every fix is expensive and every delay is visible. The idea of this talk is to move that meeting to the start. When security is part of how software is designed, written and released, the findings become smaller and earlier, and the team keeps its pace.
I gave this talk online for the Hackpoint community in April 2026. It is the most recent telling of an idea that runs through all my talks: safety is built in from the start, not added at the end.
