For years software security at Adobe meant defending ubiquitous software on the desktop and in the browser. But with offerings like Creative Cloud, Adobe is now in the hosted services game. The secure software engineering team had to retrench and retool to secure a new type of offering against a new set of threats. This talk describes the evolution of security at Adobe to meet this new challenge.