🎥 New Video Drop: Behind the Scenes of OWASP FIASSE — The Securable Framework
If you’ve ever felt that AppSec and Engineering sometimes speak different dialects of the same language, you’re not alone. And that’s exactly why FIASSE exists — to build a bridge, not a bottleneck.
This week, I sat down with the OWASP FIASSE project leader Alton Crossley for a candid, insightful, and surprisingly fun conversation about reimagining how security fits inside modern software engineering.
𝗙𝗜𝗔𝗦𝗦𝗘 (/feiz/) — Like “phases of the moon”… because security is never static
Software isn’t a one-time event, and neither is security. FIASSE reminds us of the Securable Principle — there is no final “secure” state. Only continuous evolution, learning, and improving resilience. And honestly, isn’t that a refreshing reality check? ✨
What We Covered in the Video
Here’s your teaser: • Why AppSec progress has been slow — and why the “shift left everything!” mantra isn’t enough • How FIASSE reframes security in terms developers already understand (qualities, not checklists) • The SSEM Model (Maintainability, Trustworthiness, Reliability) and why it’s the quiet powerhouse behind securable software • Why AI-generated code makes FIASSE not just useful… but urgent • How we can reduce friction between engineering & security (yes, it’s possible!) • How principles, not policing, can shape resilient software systems • Sneak peek into the upcoming roadmap: guides, examples, adoption patterns & more
Youtube Link - https://youtu.be/82ZvPtFqT84
Let’s Make This Interactive — Questions for YOU
1️⃣ Do you believe “secure software” is achievable, or only “securable software”? 2️⃣ How should security teams participate (not police) in your engineering workflow? 3️⃣ With AI writing more code each day, what expectations should we set for code assistants? Should they follow the same behavioral principles as developers? 4️⃣ If you could fix one piece of friction between dev & AppSec teams… what would it be? 5️⃣ Would you want a FIASSE Primer or live workshop to help your teams adopt the model?
Drop your thoughts — this project grows stronger with your perspective. 👇
#OWASP #FIASSE #SecurableSoftware #AppSec #SecureByDesign #SoftwareEngineering #AIAppSec #AIInSoftware #ShiftLeft #DevSecOps #SSEM #OWASPProjects #EngineeringCulture #SecurityCommunity #SecurityFrameworks