Join us on **Wednesday 18th** **June** for a deep dive into Threat Modeling methodologies. Whether you’re just getting started with threat modelling or looking to elevate your current practice, this session will equip you with practical strategies to embed security throughout the software development lifecycle - without slowing innovation.

**Explore Threat Modeling Methodologies: Practical Strategies for Scaling Secure Design**

**Details**
**Date:** Wednesday, 18th June
**Time:** 6:00–8:00 PM
**Location:** 22 Bishopsgate, Level 55, EC2N 4BQ - ***Due to building security requirements, all attendees must RSVP providing first name, last name and company email address to gain access.***

**IMPORTANT** - [if you previously RSVP'd without providing these details, please complete this form](https://docs.google.com/forms/d/e/1FAIpQLSfrJKG2JhUTGO7T9zr9zQelVH6-gN4qrrC0T5qLUZOABprnvA/viewform?usp=sharing&ouid=108646091890291106492). RSVPs are now CLOSED

**Synopsis**
Join us for an engaging evening focused on demystifying threat modeling and equipping your teams with practical strategies to embed security throughout the software development lifecycle. This session will explore a range of methodologies—including STRIDE, DREAD, PASTA, and VAST—highlighting the real-world benefits and limitations of each.
Whether you're new to threat modeling or looking to evolve your current practices, you'll gain insights into how different frameworks align with business goals, technical architecture, and adversarial risk—while supporting agility and innovation.
Through real-world examples and implementation tips, attendees will learn how to:

* Evaluate which methodologies best fit your team’s maturity, objectives, and workflows.
* Identify effective starting points based on business risk and compliance requirements.
* Engage key technical stakeholders and integrate seamlessly with Agile and CI/CD pipelines.
* Leverage automation and AI to enhance modeling accuracy and scale threat identification.

You’ll walk away with a practical understanding of how to build or enhance a cross-functional, continuous threat modeling practice—regardless of the methodology you choose.

**Join the community:**
Can't make it to the event? Keep up to date with our activities on [LinkedIn](http://www.linkedin.com/company/devsecops-london-gathering) & [Twitter](https://twitter.com/DevSecOpsLG)

With thanks to our Sponsors - [ThreatModeler](https://threatmodeler.com/), [Orca Security](https://orca.security/) and our venue hosts [Palo Alto Networks](https://www.paloaltonetworks.com/).

DevSecOps - London Gathering

Steve G

Glenn Wilson

Jessica Cregg

Frankie R

Adam Reviczky

Norbert D'souza

Clive Darra

Eduard  Popescu 

Alex Olivier

GEORGII LESNICHENKO

Deniz Celik

Vikram V

Barbara N

Anatolii Popov

Ashish Sharma

Alan Moon

kassra niroumand

Krzysztof Kwietniewski

Sam Stepanyan

xiu bao

Explore Threat Modeling Methodologies

Palo Alto Networks Office

Welcome to the DevSecOps London Gathering July Event on Wednesday 23rd July!
📍 **Hosted at Veracode, 36 Queen Street, London**
📅 **Wednesday, 23rd July**
🕕 **6:00–8:00 PM**

This month, we’re diving into a real-world DevSecOps success story - one that saved $20K annually and made open-source work harder, smarter, and more securely in production.

**🎤 Talk Title:**
**How We Saved $20K Annually by Hosting Our Own Map Server on AWS Using TileServer**
**Speaker:** Vim (AWS Community Builder & Cloud Architect)

**Talk Synopsis:**
When map service costs began spiralling and compliance requirements demanded expensive licensing upgrades, Vim and his team made the move from Mapbox to a self-hosted TileServer solution on AWS — cutting costs by 96% annually.

In this talk, Vim will take us through:

* Why and how the switch to **TileServer** happened
* The **serverless AWS architecture** behind the scenes
* Challenges with generating and managing map data
* The **security controls** layered in — including WAF, CloudFront Functions, Lambda Authorizer, and VPC Link
* Lessons learned and best practices for anyone scaling open-source solutions in the cloud

Whether you’re working on cloud cost optimisation, building secure infra, or scaling open-source in production, this is one to catch.

As always, there’ll be drinks, snacks, and time to network with fellow DevSecOps engineers, architects, and security leaders.

🎟️ RSVP now and join us on July 23rd!

**Join the community:**
Can't make it to the event? Keep up to date with our activities on [LinkedIn](http://www.linkedin.com/company/devsecops-london-gathering) & [Twitter](https://twitter.com/DevSecOpsLG)

Jayan Ravanan

Jack B

Xavier SVJ

Melissa Lewington

How we saved $20K a year by hosting our own map server on AWS using Tile Server

Veracode 

**Stay tuned for more details on the August Event!**

**RSVP to join us!**

**Join the community:**
Can't make it to the event? Keep up to date with our activities on [LinkedIn](http://www.linkedin.com/company/devsecops-london-gathering) & [Twitter](https://twitter.com/DevSecOpsLG)

Likhan Sarkar

Gargee Mukherjee

August Event

**Stay tuned for more details on the September Anniversary event!**

**RSVP to join us!**

**Join the community:**
Can't make it to the event? Keep up to date with our activities on [LinkedIn](http://www.linkedin.com/company/devsecops-london-gathering) & [Twitter](https://twitter.com/DevSecOpsLG)

September Event

DevSecOps London Gathering

{networkName} suchen

Gruppen

{PRO_NETWORK_NAME} ist mit mehr als {PRO_MEMBER_COUNT} Mitgliedern in {PRO_GROUP_COUNT} Meetups weltweit auf Meetup Pro vertreten. Meetup Pro ist das professionelle Tool zum Organisieren und Kommunizieren eines Netzwerks aus Anwender:innen, Partner:innen, Mitwirkenden und Mitgliedern.

DevSecOps London Gathering

DevSecOps London Gathering

Wer wir sind

DevSecOps London Gathering suchen

Bevorstehende Events

Gruppen