Managing the security risks of serverless applications is not the responsibility of the cloud providers. In the shared responsibility model, cloud providers manage the security risks of the platform and cloud resources that enable serverless applications. Managing the security risks of the application layer resides squarely with the application owner (i.e., cloud client). Positively, and the focus of this Stratecast insight, security vendors exist to assist application owners in constructing secure and resilient serverless applications, and minimizing the restraint that security risk could have on organizations reaping the benefits of serverless.