Tag
Guillermo Rauch argues security will grow into a core function of software companies, framing it as verification engineering and capital allocation amid increasingly sophisticated AI-driven threats, presenting both a trust challenge for small startups and a major investment opportunity in the cybersecurity space.
The author argues that Verification Engineering is becoming a key bottleneck and career direction in AI-native organizations, and shares seven practices: using Rust-based toolchains to shorten feedback loops, layering programmatic E2E tests, having agents perform regular real-world inspections, reducing the load on dev/test environments, verifying code after it's merged, verifying that tests can actually catch bugs, and building observability for the verification system itself.