Speaker
Abstract
The Platform That Sees Risk Before Code Does
Secure Software Supply Chain reimagines DevSecOps by shifting from reactive tollgates to predictive intelligence. Powered by weighted ensemble ML models trained on your entire development lifecycle—from JIRA requirements to production incidents—it generates real-time risk scores (1-100) at every stage. But prediction is just the beginning. Integrated generative AI automatically remediates vulnerabilities, enhances requirements, and patches dependencies within seconds. Built for regulated fintech environments, it delivers explainable decisions through SHAP analysis, ensuring compliance auditors see exactly why code was flagged. The result: security that doesn't slow you down—it accelerates innovation by catching risks invisible to traditional scanning.
Topics
QCon San Francisco 2025 is a three day conference for senior software engineers, architects and team leads. An international program committee of working engineers selects every session. Patterns and practices, not products and pitches.
From the same track
Monday 17 November
10:35 Ballroom BC Session AI Designing AI Platforms for Reliability: Tools for Certainty, Agents for Discovery Aaron Erickson Senior Manager and Founder of the DGX Cloud Applied AI Lab @NVIDIA, Previously Engineer @ThoughtWorks, VP of Engineering @New Relic, CEO and Co-Founder @Orgspace Modern AI platforms don’t have to choose between deterministic precision and probabilistic exploration—they need both. 11:45 Ballroom BC Session Fleet Management Confidently Automating Changes Across a Diverse Fleet Casey Bleifer Senior Software Engineer @Netflix Maintaining up-to-date and secure software across a polyglot fleet is a challenge for any engineering organization. Manual migrations and urgent updates disrupt productivity and require coordination across many teams. 13:35 Seacliff ABC Session AI/ML Secure Software Supply Chain: Risk Prediction at the Speed of Development Bishwajeet Paul Architect, Platform Engineering @JPMorgan Chase - Specializing in Solving Complex Challenges for the Developer Community The Platform That Sees Risk Before Code Does… 14:45 Pacific DEKJ Session CI/CD Keeping the Mainline Green Across Diverse Language Monorepos Dhruva Juloori Senior Software Engineer @Uber, Core Contributor to SubmitQueue (Uber's CI System at Scale), Expert in Machine Learning, Distributed Systems, and Developer Productivity At Uber’s scale, ensuring an always-green mainline while processing hundreds of changes per hour is a massive challenge— especially when those changes span multiple language monorepos supporting dozens of business-critical apps. 15:55 Seacliff ABC Session Rust Rust at the Core - Accelerating Polyglot SDK Development Spencer Judge Engineering Manager @Temporal Technologies, previously Senior Software Engineer @Transparent Systems, Senior Software Engineer @ Tableau Software Developing SDKs for your users in multiple languages can come at a high cost - especially if you need to implement complex logic client side, but traditionally options for sharing logic across those languages have been quite limited. 17:05 Ballroom A Session Vibe Coding Directing a Swarm of Agents for Fun and Profit Adrian Cockcroft Technology Advisor and Consultant @OrionX.net, Previously VP Open Source and Sustainability @Amazon, Cloud Architect @Netflix, Distinguished Engineer @eBay Coding agents are a new tool, which many of us are trying to figure out how to use effectively.