Scalably Securing Third-party Dependencies in Heterogeneous Environments

Learn how to automate dependency security at scale across diverse infrastructure environments while maintaining developer flexibility in this 31-minute conference talk from BSidesSF 2025. Discover Anthropic's approach to enforcing dependency posture at the network level through their tool called Dependant, exploring how engineers can continue using necessary tools and dependencies without compromising security. Examine practical strategies for managing third-party dependencies in heterogeneous environments and understand the user interaction patterns that make scalable security enforcement possible across different development workflows.