Security vs Innovation: A False Dichotomy - Chainguard
Overview
In this CISO Inspired Summit masterclass, Tom Llewelyn, Senior Enterprise Sales Engineer at Chainguard, challenges the idea that security and innovation are at odds, with security teams locking things down while technology teams want to move as fast as possible.
Tom explains how baking security and compliance into developers' normal workflow frees up their time, and how Chainguard delivers open-source software securely by building it from source and rebuilding its catalogue continually, reducing vulnerabilities and operational risk.
Key takeaways
- Security is often seen as a blocker, but a secure foundation can make compliance transparent to developers and free them to innovate.
- The mean time to remediate a vulnerability in an enterprise is 275 days or more, largely because fixes must pass through many upstream steps before reaching end users.
- Chainguard rebuilds its entire software catalogue at least daily, delivered as container images and now VM images, so consumers stay current.
- Verifiable, built-from-source software gives confidence against open-source ecosystem attacks such as the Shai-Hulud npm worm.
- Adoption takes time: onboarding typically takes months, and the technology function bears the cost of change even when the tool itself is free.
Watch the full session on YouTube: Security vs Innovation: A False Dichotomy - Tom Llewelyn, Chainguard - CISO Inspired Summit


