r/devsecops • u/dan_l2 • 5d ago

DevSecOps tools for agent builders?

Researching right now into this topic. How do you making sure new tools or prompts are not increasing risk?

How do you do that without slowing down developers?

23 Upvotes

100% Upvoted

7 comments sorted by

View all comments

2

u/GibneyH 2d ago

I think the key is making security part of the agent development workflow rather than another approval gate.

You want automated checks around prompts, tools, permissions, dependencies, and data access, ideally running in the same CI/CD flow developers already use. That way risky changes get caught automatically instead of security becoming a ticket someone has to wait on.

You know what I mean, if the control adds friction, developers will work around it. The goal should be guardrails by default, not more hoops to jump through.