Threat modeling often feels like a box-ticking ritual to busy developers: abstract diagrams, fuzzy “definition-of-done,” and security jargon that does not always land well. In this keynote we’ll flip that script. Through real-world stories—from shipping-code-at-midnight startups to highly regulated cloud platforms and industries - we’ll explore pragmatic techniques that speak the developer’s language: unit-test-driven misuse cases, “evil-user” stories, and lightweight tooling wired straight into CI/CD. Expect war-stories, laughs, and actionable patterns your teams can steal tomorrow so developers see threat modeling as craft, not chore.

‍