It's Not a Best Practice If No One Can Follow It - Learning From Our Container Security Mistakes

Learn from container security pioneers as they reflect on a decade of challenges and evolution in this conference talk from KubeCon + CloudNativeCon. Discover the hard-won lessons from early container security efforts, including the complexities of Twistlock's detection and microsegmentation approach and Alpine Linux's minimal base image strategy. Explore why powerful security tools often failed to gain widespread adoption due to implementation difficulties, policy complexity, and operational challenges. Understand how Alpine's popularity was hindered by build compatibility issues, limited language support, and the burden of security patch maintenance. Gain practical insights from John Morello, former CTO of Twistlock and current co-founder of Minimus, and Alex Zenla, CTO and co-founder of Edera, as they share actionable lessons that modern engineering teams can apply to strengthen their container security posture and avoid common pitfalls in container hardening strategies.