Security Development Lifecycle (SDL) Tooling

This thread tracks the evolution of Slack's Security Development Lifecycle (SDL) processes and tooling. Initial posts likely detailed foundational security principles and the challenges of integrating security into a fast-paced development environment. This post introduces 'goSDL', an open-source web application designed to guide developers and PMs through security checklists and risk assessments. It aims to empower developers with self-sufficiency, reduce friction, and foster a culture where security is a shared responsibility, moving away from manual, blocking reviews.