# Improving the Developer Experience -- Our Application Security Journey (Part 3)

DevFeed: [Improving the Developer Experience -- Our Application Security Journey (Part 3)](<https://devfeed.tech/articles/improving-the-developer-experience-our-application-security-journey-part-3-15456.md>)

Original publisher: [Read original article](<https://medium.com/wise-engineering/improving-the-developer-experience-our-application-security-journey-part-3-757e0e6d32e4?source=rss----f2565bbe9c46---4>)

Author: Florian Wirtz

Published: 2023-01-17T11:19:44Z

Content type: article

Language: en

Sources: [Wise Engineering - Medium](<https://devfeed.tech/sources/wise-engineering-medium.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Developer experience](<https://devfeed.tech/topics/developer-experience.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [dashboards](<https://devfeed.tech/topics/dashboards.md>), [software composition analysis](<https://devfeed.tech/topics/software-composition-analysis.md>), [trivy](<https://devfeed.tech/topics/trivy.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [dashboards](<https://devfeed.tech/tags/dashboards.md>), [developer-experience](<https://devfeed.tech/tags/developer-experience.md>), [platform](<https://devfeed.tech/tags/platform.md>), [security](<https://devfeed.tech/tags/security.md>), [software-composition-analysis](<https://devfeed.tech/tags/software-composition-analysis.md>), [trivy](<https://devfeed.tech/tags/trivy.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

## AI overview

This third article in Wise's application security series examines how to improve developers' experience when fixing vulnerabilities. It describes feedback gathered through surveys and interviews, identifying slow dashboards and the need for developers to proactively check them as key pain points.

## Source excerpt

Improving the Developer Experience -- Our Application Security Journey (Part 3) This is the third in a series of articles on the state of Application Security at Wise, describing our integration of security in the Software Development Lifecycle. Photo by Possessed Photography on Unsplash In part three of our blog post series we will be focusing on how we can improve the developers' experience around fixing vulnerabilities. We explore how we identified the main pain points developers were facing, what we did to improve this experience and future improvement ideas that we are planning to work on. Recap: What happened so far? Over the course of the last year we have created our new setup for identifying vulnerabilities at Wise. It's centred around DefectDojo as our vulnerability management tool and we use scanners, such as Trivy for Software Composition Analysis, as inputs. You can learn more about our setup in part one of this blog series. Since then we have also created various dashboards to report vulnerabilities to our stakeholders, and also improved our Service-level agreement (SLA) with our developers to resolve new vulnerabilities. To learn more about that, please read part two of this series. What issues are our developers facing? As a next step, it's important to check in with our developers to see how they're interacting with our program. It's one thing to set up a vulnerability management program, but we also need to make sure that it actually works for our users and that the recommendations provided are actioned in a timely manner. While the initial feedback we received from developers was promising, we decided to share a survey with them to collect more actionable feedback. Our survey had a mix of multiple-choice and free-form questions and was mostly focused on how developers are using our tools and what issues they might be facing with them. We also interviewed them for analogous use cases, including what works well and what doesn't work well in other too