The developer-first security approach puts security tools in the hands of a developer to implement them in the development environment. In the past, application security was an afterthought after development.