Building better product security

The document discusses building product security through a secure software development lifecycle (SDLC). It recommends that engineers be involved throughout the development process to implement security best practices. These include defining security requirements, developing coding guidelines, implementing static code analysis, performing security testing and vulnerability testing. Following an SDLC can help avoid common failures like claiming vulnerabilities are features or installing applications in vulnerable environments. While rigorous, such a proactive approach can ultimately save a business by catching and fixing issues early.