Episode #078: 🔥 Burn Your 30-page Policies: Tanya’s Got Better Ideas

About this episode

Ken welcomes Tanya Janca to discuss the failures of application security policies and how to improve them.

Send us Fan Mail In this must-listen episode of Relating to DevSecOps, Ken welcomes the ever-inspiring Tanya Janca, aka SheHacksPurple—author, AppSec expert, and champion of making security usable. Together, they dig into why so many application security policies fail, why developers ignore them, and how to make them actually work. Tanya shares real-world experiences from both dev and security perspectives, plus her journey from being ignored to lobbying governments for change. From communic...

People in this episode

Hosts: Ken Toler, Mike McCabe

Guest: Tanya Janca

Topics covered

• application security
• DevSecOps
• security policies
• developer experience
• government lobbying

Keywords

• application security
• DevSecOps
• security policies
• Tanya Janca
• developer engagement

Mentioned in this episode

Organizations: SheHacksPurple

More episodes of Relating to DevSecOps

• Episode #083: AI Mythos, Security Fundamentals, and the Zero-Day Panic Cycle · April 29, 2026 · 44 min
• Episode #082: AI Hype, Human Cost · March 17, 2026 · 44 min
• Episode #081: Burnout by Budget Season: Surviving Q4 in Security · October 29, 2025 · 22 min
• Episode #080: Patch Me If You Can: Compliance, SLAs, and Other Fairytales · August 25, 2025 · 34 min
• Episode #079: CISOver It: When Dashboards Replace Direction · June 10, 2025 · 37 min
• Episode #077: Is Google Eating the Cloud? 🔥 Wiz.io Acquisition Hot Takes · March 24, 2025 · 32 min