TLDR IT · ANALYSIS & OPINIONS
THE “LEFT” IN SHIFT-LEFT MOVED
Summary from the TLDR IT newsletter
AI has shifted left from code repositories to coding agents on developer endpoints with broad privileges, where AppSec has limited control. AI-driven discovery is also flooding defenders with vulnerabilities. The better approach is to eliminate entire vulnerability classes rather than fix tickets one by one, while rethinking human-in-the-loop oversight when agents can both write and remediate code.