Abstract: A system and method for defense in depth, which employs a feedforward orchestrator, of at least one software delivery pipeline includes a security context and the feedforward orchestrator being configured to analyze the security context for each stage of the software delivery pipeline to mitigate security vulnerabilities. The system and method also implement security controls with at least one feedforward technique. Also, the feedforward orchestrator continuously employs feedback of the system to inform subsequent stages or subsequent layers of integration and deployment functions of the at least one software delivery pipeline.

Abstract: A system and method for continuous automated threat modeling which is based on prompt engineering using large language models includes a threat modeling engine, a threat prompt generator, and a continuous automation module configured to retrieve a threat prompt from the threat prompt generator and to perform a security assessment of the threat prompt on a continuous, automatic basis. In addition, the system and method each include integration with a large language model for generating threat models and mitigations pertaining to those threat models.