Vibe Coding: Practical Guide to Updating Your AppSec Strategy for AI

Secure Code Warrior's Director of Customer Strategy looks at how "vibe coding" — AI-assisted and agentic coding, now used by developers and non-developers alike — has delivered a huge velocity gain, while research shows AI-generated code is wrong or insecure roughly two-thirds of the time.

Watch the session for a practical, three-part blueprint:

• People — why developers, upskilled in secure prompting and what insecure AI output looks like, remain your strongest line of defense
• Process — how to centralize on a sanctioned AI coding assistant to eliminate shadow AI tool use, and turn static secure-coding guidelines into AI-powered, context-aware prompts and gates
• Platform — how to use the security features already built into your existing AI coding tools, pilot new vendor AI features cautiously, and run a developer skills inventory to target training where it matters

The session closes with a look at what's next: security agents built into the pipeline, AI-native scanning, and tightening regulation under the EU AI Act and NIST's AI Risk Management Framework.