HomeOpen Source North

Time:

Room:

Evolving Security:  Building Unified tooling to Agentic AI: Autonomous IaC Security Remediation

We started with a simple goal: to build custom unified security tools that could survive enterprise challenges. By, using AI-assisted development and fast feedback loops, we stumbled into something interesting—a structure for an autonomous agentic AI that remediates Infrastructure as Code vulnerability.

In this talk, we'll share the unexpected journey from "let's survive another tool migration" to "wait, AI can autonomously fix these security issues?" We'll demonstrate live:

Back Story: How "progress over perfection" led to the innovation

Enhancing developer productivity by integrating customized security solutions into the development lifecycle

The evolution from fast feedback to autonomous remediation for IaC vulnerabilities

Real examples of autonomous agentic AI IAC vulnerability remediation in the Developers SCM tool.

What makes this different: This isn't about buying tools or following playbooks—it's about small teams using AI to build solutions that would have taken enterprise-sized teams’ years to develop. We'll show real code, real failures, and the discoveries that changed how we think about security automation.


bio of Clay Cotter

Clay Cotter

Director, Information Security Engineering

Thrivent

Clay Cotter is the Director of Cyber Security and Identity Access Management, reporting directly to the Chief Information Security Officer (CISO). Clay serves in this position for Thrivent Financial, its subsidiaries, and affiliates (Thrivent). Before this role, he was a security engineer for several of his teams as well as manager of the Cyber Defense teams.

bio of Rahul Gauli

Rahul Gauli

Senior Software Engineer

Thrivent

Rahul Gauli is a Senior Software Engineer at Thrivent, working in the application security team, focused on building developer-centric, practical security and AI solutions for a unique and modern application security infrastructure.

Stay in the Loop!

Sign up for OSN email announcements and updates.