TN-BRIEF/09 / PRODUCT SECURITY / 50.82N 0.13W / 16 OCT 2026
Tonos
Most of your risk sits in a few decisions.
Notes on product security: prioritising vulnerabilities, champion programmes, design review. Written by Joseff Lewis.
PRN/01
Empathy for engineers
Security advice should account for delivery pressure, existing architecture, and the effort involved in making a change. Work alongside the team to find a practical way forward.
PRN/02
Automate where you can
Automate repeatable checks and routine triage so engineers can spend their time on decisions that need context and judgement.
PRN/03
Keep advancing the practice
Explore, test, and adopt better approaches to security problems. Show the methods you use and explain why they improve the outcome.
Writing now
On the bench
An agentic harness that runs the repeatable checks, so review time goes on judgement.
Joseff Lewis
Product security engineer and penetration tester.