Developer experience

Security tooling that developers cannot live with gets bypassed, and the bypass becomes the real process.

Slow scans, false positives, blocking checks that cannot be overridden and approval queues all generate workarounds. The workaround is then invisible and unmanaged. Usability in security tooling is not a nicety; it determines whether the control exists in practice or only on the diagram.