Industry leaders, security practitioners, and AI innovators are converging at The DevSecOps Summit 2025 to discuss how to secure AI systems from the first line of code to production deployment and beyond.
TL;DR
- DevSecOps Summit 2025 took place November 12, 2025, in both virtual and in-person formats for global accessibility.
- The summit addressed how AI code generation creates security debt when downstream pipelines cannot validate at the same speed.
- Practitioners learned to automate threat detection, compliance checks, and vulnerability management without slowing releases.
- Sessions included live product demonstrations, implementation case studies, and hands-on security orchestration workshops.
The AI revolution isn't coming—it's already here, and it's rewriting the rules of software development at breakneck speed. AI agents autonomously navigate entire codebases and generate code faster than ever before. But as we embrace these powerful tools, a critical question emerges: Are we all building on solid ground, or are we constructing skyscrapers on quicksand?
Welcome to the new frontier of DevSecOps, where artificial intelligence isn't just changing how we build software—it's fundamentally transforming what we need to protect and how we protect it.
On November 12th, Harness is hosting the virtual DevSecOps Summit 2025. Industry leaders, security practitioners, and AI innovators are converging to tackle the most pressing challenge of our generation: securing AI systems from the first line of code to production deployment and beyond. This isn't about adding another checkbox to your security compliance list. This is about reimagining security for an era where code writes code, where models make decisions, and where vulnerabilities can be AI-generated as quickly as features.
Why AI Features Matter Now
The statistics are sobering. AI-generated code is proliferating across enterprise codebases, often without adequate security review. Large Language Models (LLMs) are being deployed with proprietary data access, creating unprecedented attack surfaces. Agentic systems are making autonomous decisions that can impact millions of users. And traditional security tools? They're struggling to keep pace.
But here's the paradox: while AI introduces new security challenges, it's also a powerful multiplier to our efforts to address them. The same technology that can generate vulnerable code can also detect anomalies, predict threats, and automate security responses at machine speed.
From Pipeline to Production: A Holistic Approach
This summit explores the complete AI security lifecycle—because threats don't respect the boundaries of your CI/CD pipeline. Here are just a few of the topics that we’ll examine at the Summit:
- When Vibe Coding Loses Its Cool: Vibe coding is changing how we design, code, and secure software, but it must be done thoughtfully. Tanya Janca (author of Alice and Bob Learn Secure Coding) and Adam Arellano of Harness will engage in a lively fireside chat about bringing AI into your development workflow safely and effectively.
- Ways to Ensure Security Across the SDLC: Leading experts from Harness, Wiz, Citizens Bank, and InterSystems will demonstrate a unified and integrated approach to AI security, emphasizing that robust protection must span the entire lifecycle, from the initial pipeline stages to full production deployment. Attendees will:
- Gain insights into how to bridge the existing gaps between development and operations security with a practical, actionable framework for securing AI applications end-to-end.
- Learn how to ensure that your security controls are not static, but evolve dynamically and as rapidly as your AI capabilities with continuous protection against emerging threats and vulnerabilities in an ever-changing landscape.
- How to Check Your AI Blind Spot: Security researchers from Harness, SentinalOne, and ASPEN Labs share real-world examples of threats targeting AI-native applications, risky behavior is usage of AI components, and even how attackers are using AI tools to attack faster. You'll learn:
- Practical approaches to securing your new AI attack surface, implementing guardrails for rolling out AI functionality without slowing down development.
- Invaluable insights into the intricacies of securing an AI-powered future, exploring practical approaches to counter sophisticated attack vectors.
- What researchers are experiencing the wild and how they’re securing AI-native applications in real-time.
What You'll Discover
Throughout this summit, you'll hear from practitioners who are solving AI challenges in real-world environments. They'll share hard-won lessons about securing agentic applications, preventing prompt injection attacks, validating AI-generated code, and building governance frameworks that scale with AI adoption.
Whether you're a security professional adapting to AI-powered threats, a developer integrating AI tools into your workflow, or a leader navigating the strategic implications of AI adoption, this summit offers actionable insights for your journey.
The future of software is AI-native. The question isn't whether to embrace it, but how to do so securely, responsibly, and effectively. Let's explore that future together—from pipeline to production, and everything in between.
Join us at DevSecOps Summit 2025.
What is the DevSecOps Summit 2025?
The DevSecOps Summit 2025 is an industry conference focused on securing AI-driven software delivery pipelines. The event brings together security practitioners, platform engineers, and DevOps leaders to address the security challenges created by AI-accelerated development. Attendees learn how to build threat detection, compliance automation, and vulnerability management into high-velocity release cycles without sacrificing speed.
When was the DevSecOps Summit 2025?
DevSecOps Summit 2025 took place on November 12, 2025. The event is offered in both virtual and in-person formats, allowing global participation. Sessions run throughout the day, covering topics from AI model security to production runtime protection. Registration details and the full schedule are available on the official summit website.
What topics were covered at the DevSecOps Summit?
The summit covers three core security domains: pipeline security for AI-generated code, runtime protection for deployed AI features, and compliance automation for regulated environments. Sessions included live demonstrations of security orchestration tools, case studies from companies scaling AI development securely, and workshops on integrating automated threat detection into CI/CD workflows. All content focuses on practical, implementation-ready strategies.
Who should attend the DevSecOps Summit 2025?
Security engineers responsible for protecting production systems, platform teams building developer tooling, DevOps leaders accelerating release velocity, and compliance officers managing regulatory requirements should attend. The content is designed for practitioners actively securing AI-driven development environments. Both individual contributors and engineering leaders will find actionable insights for their specific roles in the software delivery lifecycle.
