Serverless is the design pattern for writing applications at scale without the necessity of managing infrastructure. It adds simplicity and a new economic model to cloud computing, but it creates some unique security challenges. This session will focus on practical security approaches for serverless in four key areas: software supply chain, delivery pipeline, data flow and attack detection.