How compatible are agile software development processes, such as XP, with the production of secure code? I am often asked this question and sometimes, indeed, confronted with the suggestion that they are not. Yet, my experience shows that not only is agile development compatible with secure code, it is an enabler. This Executive Update examines a recent unusual incident in the world of open source software, providing some insights in support of this position.