AI assistants have made writing code faster than ever, but they also introduce major risks—frequently shipping secrets, SQL injections, and flawed Infrastructure as Code (IaC) templates by default. While security tools exist to catch these errors, most require uploading source code to third-party SaaS clouds. This practical talk introduces Lomo CodeSecurity, an open-source, local-first security scanner built to run entirely on localhost. We will explore how to wire a local security gate into your daily development loop by orchestrating eight major industry scanners (including Trivy, Gitleaks, and Checkov) and optionally triaging findings using a local Ollama LLM—with zero cloud dependencies. Attendees will walk away knowing what AI-generated code consistently gets wrong, how to build offline AI security tooling, and see a live demo that goes from zero to a populated findings dashboard in just 90 seconds.
Mladen Maric is a seasoned infrastructure expert with a deep background in large-scale operations. He spent years as a Senior Site Reliability Engineer (SRE) at Zscaler, operating the Zero Trust Exchange at a scale of hundreds of billions of transactions per day. Prior to that, he spent nine years at Juniper Networks building SDN/NFV automation and hybrid clouds for major global telecommunications providers, including Deutsche Telekom and Orange. He is currently building open-source, privacy-first security tools for modern engineering workflows.
