For whatever reason we didn't really bring with us the aspects about security when moving from a waterfall to an agile process. But that is not a good excuse for negligence it. Also the threat landscape have changed quite a bit since then. So what should you practically do to incorporate the security aspects into your regular development loop? This session will give you some practical ideas to improve your security work as well as giving you the means to continue do so.