Security maturity in development teams: what, and how?
In this webinar, Scott Shapiro, SCW’s Director of Product Marketing, will discuss the different stages of security maturity in developer teams and the pitfalls to avoid when working to improve security maturity, and shift security left.
Scott Shapiro, SCW's Director of Product Marketing, is joined by Alex Shuckman, CISO of Colgate-Palmolive, for a look at what security maturity really means for development teams — and how to build it deliberately rather than leave it to chance.
Watch the session to learn:
- Why 67% of developers admit to shipping code they know contains vulnerabilities, and what that reveals about process maturity, not just skill
- SCW's three-stage maturity framework — Defining, Adopting, and Scaling — and the common blockers at each stage
- How Colgate-Palmolive gates repository access on completed secure-coding training through an automated workflow, and why they call it "guardrails, not gatekeeping"
- How gamified tournaments and security ambassadors build genuine developer ownership instead of compliance-driven checkbox training
- Why closing the loop with developer feedback channels does more for buy-in than top-down mandates
Explore more events and webinars
Access expert content on secure coding, AI governance, and software risk management.
%252520(1).avif)
OWASP Global AppSec USA
Proud to be a Silver Sponsor of OWASP Global AppSec USA 2026, celebrating its 25th anniversary on November 5–6, 2026, at the Hyatt Regency in San Francisco! Join us and 800+ application security professionals for sessions on AI security, threat modeling, a Capture the Flag competition, the OWASP Projects Demo Room, and exclusive networking receptions. Come find us there and let's connect!
OWASP LASCON
We are proud to be a Gold Sponsor for OWASP LASCON 2026 in Austin, TX! Join us at the Norris Conference Center as we gather with over 400 web developers and security professionals to share cutting-edge ideas in application security.
Secure AI-driven development before it ships
See developer risk, enforce policy, and prevent vulnerabilities across your software development lifecycle.
