Security Mindset

Making sense of OWASP A08:2021 – Software & Data Integrity Failures

October 5, 2021

Why is Server-Side Request Forgery #10 in OWASP Top 10 2021?

September 30, 2021

AWS Security: Why you should use IAM roles for access control

Security Culture

How to put the Threat Modeling Manifesto into action

Supply chain insecurity: Keep your eyes on the road with Ruby on Rails

Application Security and the Zen of Python

How Performance Became the Nemesis of the Secure Python Code

Why Vulnerability List Methodologies Matter (And why we trust CWE & OWASP)

Security Culture

DevOps security culture: 12 fails your team can learn from

January 29, 2021

Security Journey

Correct answers in our security belt programs

October 30, 2020

Security Culture

The carrot and the stick: Security rewards and recognition

October 16, 2020

Security coaches

September 21, 2020

Tips for application security program building

Security Culture

Three ways to empower remote threat modeling

Security Culture

How to hack your security culture

November 28, 2019

AppSec Training Strategies

How do you start in cybersecurity?

October 10, 2019

Secure Development Lifecycle: The essential guide to safe software pipelines

AppSec Training Strategies

How developers can take the lead on security

The 3 most crucial security behaviors in DevSecOps

December 3, 2018

A primer on secure DevOps: Why DevSecOps matters

October 27, 2018

AppSec Training Strategies

4 ways to engage developers who couldn't care less about security

September 17, 2018

Security Culture

Information security needs community: 6 ways to build up your teams

August 22, 2018

Tech firms take different security approaches than others. That's good and bad

AppSec Training Strategies

6 application security lessons every team should study

Need more information about Security Journey? Get in touch.

Ready to start your journey?