294: From "shift left" to "shift everywhere" (with OpenText Cybersecurity's Dylan Thomas)

What the Dev?

In this episode, we interview Dylan Thomas, senior director of product engineering at OpenText Cybersecurity, about the evolution from shift left to shift everywhere.

At the end of 2024, he predicted: "In 2025, DevSecOps will continue evolving beyond the ‘shift-left’ paradigm, embracing a more mature ‘shift everywhere’ approach. This shift calls on organizations to apply the right tools at the right stages of the DevSecOps cycle, improving efficiency and effectiveness in security practices. Lightweight analysis in IDEs will help developers catch issues early, while automation integrated into pull requests and CI/CD pipelines will ensure a cohesive ‘integrate once’ approach for core functions such as SAST, SCA, and increasingly DAST, particularly for API security testing."

We interviewed him about his predictions, and talked about:

• What shift everywhere is
• Why people are wanting to transition to this new approach
• How to get started with shift everywhere