BT

Facilitating the Spread of Knowledge and Innovation in Professional Software Development

Write for InfoQ

Register Sign in

Unlock the full InfoQ experience

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources.

Log In

or

Don't have an InfoQ account?

Stay updated on topics and peers that matter to youReceive instant alerts on the latest insights and trends.
Quickly access free resources for continuous learningMinibooks, videos with transcripts, and training materials.
Save articles and read at anytimeBookmark articles to read whenever youre ready.

Logo - Back to homepage

News Articles Presentations Podcasts Guides

Topics

Development

Featured in Development

Expanding Swift from Apps to Services

Cory Benfield discusses the evolution of Swift from an app language to a critical tool for secure, high-scale services. He explains how Swift’s lack of a garbage collector eliminates tail latency and shares how its "zero-cost abstractions" rival C performance. He shares Apple’s roadmap for incremental adoption and demonstrates groundbreaking new interoperability for C++ and Java ecosystems.

All in development

Architecture & Design

Featured in Architecture & Design

Platforms for Secure API Connectivity With Architecture as Code

Jim Gough discusses the transition from accidental architect to API program leader, explaining how to manage the complexity of secure API connectivity. He shares the Common Architecture Language Model (CALM), a framework designed to bridge the developer-security gap. By leveraging architecture patterns, engineering leaders can move from six-month review cycles to two-hour automated deployments.

All in architecture-design

AI Infrastructure

Featured in AI, ML & Data Engineering

Building a Least-Privilege AI Agent Gateway for Infrastructure Automation with MCP, OPA, and Ephemeral Runners

This article presents a least-privilege AI Agent Gateway that places clear controls between AI agents and infrastructure. Agents do not access infrastructure APIs directly. Instead, every request is validated, authorized using policy as code with Open Policy Agent (OPA), and executed in short-lived, isolated environments, with built-in observability using OpenTelemetry.

All in ai-ml-data-eng

Culture & Methods

Featured in Culture & Methods

Achieve Optimal Efficiency for Your Developer Experience Teams

Fabien Deshayes discusses the strategies behind Monzo’s Developer Velocity squad. He explains the "Platform as a Product" mindset, emphasizing the need for engineers with product acumen and tenure. He shares actionable frameworks for measuring DevEx impact through time, money, and cognitive load, demonstrating how a small, focused team can drive massive results in a regulated environment.

All in culture-methods

DevOps

Featured in DevOps

Proactive Autoscaling for Edge Applications in Kubernetes

Kubernetes often reacts too late when traffic suddenly increases at the edge. A proactive scaling approach that considers response time, spare CPU capacity, and container startup delays can add or remove instances more smoothly, prevent sudden spikes, and keep performance stable on systems with limited resources.

All in devops

Events

Helpful links

Choose your language

InfoQ Architect Certification

Join Luca Mezzalira for this 5-week online cohort. Master socio-technical architecture leadership.

Register Interest.

QCon London 2026

Learn what works in AI, architecture, data, security & FinTech.

Early Bird ends March 10.

Learn how leading engineering teams run AI in production—reliably, securely, and at scale.

Early Bird ends March 10.

QCon San Francisco

Learn what's next in AI and software, from teams already doing it.

Early Bird ends March 10.

InfoQ Homepage Interviews Aaron Bedra on Security Testing as Software Engineering

Aaron Bedra on Security Testing as Software Engineering

Download

15:48

Bio

Aaron is Chief Security Officer at eligible.com. He is the creator of Repsheet, an open source threat intelligence framework. Aaron is the co-author of Programming Clojure, 2nd Edition and a frequent contributor to open source software.

About the conference

Software is Changing the World. QCon empowers software development by facilitating the spread of knowledge and innovation in the developer community. A practitioner-driven conference, QCon is designed for technical team leads, architects, engineering directors, and project managers who influence innovation in their teams.

May 27, 2016

Interview with

Aaron Bedra

by

Manuel Pais

BT