Agile is totally orthogonal to security. Its more about tailoring the work done to what is actually needed and effective teamwork. In no sense does agile dispen

Agile is totally orthogonal to security. Its more about tailoring the work done to what is actually needed and effective teamwork. In no sense does agile dispense with up front design. Similarly TDD still has to start with a specification. Designing tests on the requirements frequently cause them to be tightened significantly. If you mean 'TDD tests will never protect you from random chaos monkey coders' you are right, but it never claimed to.