Today, it’s more crucial than ever to prioritize security from the earliest stages of application development. But what does “shifting security left” really mean in practice, and how can you seamlessly integrate it into your own workflows? Do we all have to become "Devsecops" engineers, or is it more of a quality question?

In this talk, Daniel will showcase real-world examples and actionable tactics drawn from Tauri -- a secure, cross-platform Rust framework for building desktop and mobile apps -- as well as from the broader Rust ecosystem. You’ll gain insights into designing security-conscious software architectures, implementing robust defenses at the code level, and ensuring your applications remain resilient from initial development through deployment and beyond.

Whether you’re just getting started with Rust or already running production workloads, these principles will empower you to build safer, more trusted software that meets the demands of users and regulators alike. Join this session to discover why Tauri’s approach to security is a game-change -- and how you can apply these practices in your own projects right away.

In this one-hour workshop, we will create a new rust project, where we will integrate useful rust tooling for securing the development environment. The second part of the workshop will then move the project to GitHub, where we will setup all security features for a modern software project.
Appropriate for : Beginners to Intermediate
Bring: Laptop, GitHub account

Daniel Thompson-Yvetot, currently living in Malta, is an open-source champion and entrepreneur. He is most well known for his community work designing, developing, and sustaining the Tauri framework for making desktop and mobile apps. Today, he has become a specialist in European regulations that impact software manufacturers of all shades and creeds. He is the CEO and cofounder of CrabNebula Ltd. - a company that helps software people build, distribute, and comply.