Slack App Security: Securing Workspaces from a Bot Uprising

Explore the security implications of Slack's developer platform in this 32-minute conference talk from AppSecCali 2019. Delve into the history of the Slack app directory, examine unique security challenges, and learn about Slack's efforts to enhance user safety. Join security engineers Kelly Ann and Nikki Brandt as they discuss customizing organizational workflows, address concerns about third-party apps, and provide insights on managing app installation requests with potentially alarming scopes. Gain valuable knowledge on vulnerability assessments, security best practices for developers, and the internal security review process at Slack.