As application development and modernization moves forward, security has never been more important. This episode of the Tech Field Day podcast introduces AppDev Field Day with a discussion of the importance of DevSecOps featuring Paul Nashawaty, Mitch Ashley, Michael Levan, and Stephen Foskett. Application security isn't just about the vulnerabilities in the application itself; the entire software stack must be secure. There are many approaches, from vulnerability scanning to minimization of the attack surface, but the most important thing is to build security into software from the start. There are many parallels between physical infrastructure and software applications, with many of the same security considerations. Various components make up a software bill of materials (SBOM) and any of these can expose a vulnerability or be attacked. Platform engineering is an important connector between infrastructure and developers, and plays a major role in reducing the attack surface. It's all about bringing expertise to the table to build supportable and secure platforms for modern applications.