Agentic Security & Compliance | Zania X Cursor скачать в хорошем качестве

Agentic Security & Compliance | Zania X Cursor

The velocity of AI development demands a new Governance and Compliance strategy. This discussion between Shruti Gupta, CEO of Zania & Travis McPeak from Security team of ‪@cursor_ai‬ addresses the critical challenge for the enterprise: Risk Mitigation at the speed of deployment. We cover how to break the "security-vs.-speed" paradox, the strategic threat of unmonitored 'Vibe Coding,' the necessity of policy guardrails, and the three-layer defense system required to achieve secure, daily code shipment. Timestamps: 00:00 - Trailer 00:57 - Welcome & Introduction of Travis from Cursor 01:46 - Travis's Journey into Security 02:02 - The Attacker vs. Defender Mindset 02:33 - The Origin of "Bandit" & The Shift to Automation (DevSecOps) 03:53 - The "Shift Left" Philosophy & Challenges with Developer Training 04:47 - Cloud Security at Netflix 05:11 - Enterprise Security at Databricks 05:23 - Founding "Resourcely" to Secure Cloud Infrastructure 07:49 - Joining Cursor After Acquisition 08:34 - How Cursor Ships Code Incredibly Fast 09:56 - How Cursor Uses its Own AI Tool to Build Faster 10:49 - The Right Way to Use AI: Collaboration vs. "One-Shot" 12:44 - Example Workflow: From Idea to Production with AI 15:05 - Using a "Second AI" (Bug Bot) for PR Reviews 16:10 - Using AI for Threat Modeling & Understanding Architecture 19:02 - Can AI Write Secure Code by Default? 20:28 - How Cursor Handles GRC (Governance, Risk, and Compliance) 22:56 - How Security & GRC Teams Can Start Using AI Safely 26:24 - "Vibe Coding" vs. AI-Assisted Development 28:07 - The Build vs. Buy Calculation for Security Tools 29:59 - AI Helping Attackers: Reality vs. Hype 31:49 - How AI Changes Building a Security Team 32:33 - 5-Year Outlook: The Future Role of a Security Leader 34:38 - The Next Frontier for Cursor 35:28 - Conclusion