All development teams deserve the best protection available, so somebody needs to constantly build and improve functionality to eliminate risk while streamlining the development process. As a startup, we have to make the most of our limited resources and we were fortunate enough to have some great, open source, policy engines available with the necessary extensibility. The Open Policy Agent, a CNCF project, provides a powerful, extensible engine as well as a growing community that we are excited to be a part of.
By leveraging OPA, we can focus on tackling more sophisticated, higher-level threats and risks rather than rebuilding functionality that already exists. We can also simplify the learning process for those who create security policies, while contributing back to the community. Working together, we can advance the state of the art and improve security for everyone.