Securing the Human Layer: Balancing AI Automation and Human Oversight in Security Programs

AI is becoming part of everyday open source workflows, helping maintainers review pull requests, moderate discussions, onboard contributors, and even triage security reports. While these tools save time and reduce repetitive work, some of the most important parts of security still depend on people.

Trusting a new contributor, handling responsible disclosures, resolving conflicts, and making decisions during a security incident all require context and judgment that AI cannot replace.

In this session, we'll explore where AI adds real value to community-led security programs and where human oversight remains essential. Through practical examples, you'll learn how to automate routine tasks without compromising trust, transparency, or accountability. You'll leave with a practical framework for building AI-assisted workflows that reduce maintainer workload while keeping people at the center of critical security decisions.