Fast code or secure code? You can’t have both
Too many companies are still pushing out apps without thinking about security, according to new research.
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
Security Journey Unveils Developer Manifesto as the Foundation for a Reimagined Platform in the Age of AI
The manifesto guides a developer-first platform experience with hands-on AI/LLM security training, GitHub-driven risk...
5 Types of Data You Should NEVER Share with AI
Large language models (LLMs) like ChatGPT are powerful tools, but it's crucial to remember that data privacy is paramount.
Read More
Posts by Security Journey/HackEDU Team
Securing the Future: Why Education is Key in Application Security
The International Day of Education celebrated on January 24th, serves as a powerful reminder of the transformative potential of knowledge. Let's focus on a crucial area where education can be a game-changer: application security.
Security Journey Study reveals only 20 percent of organizations can confidently detect a vulnerability before an application is released
Despite stringent regulations and calls for ‘security by design’, organizations are still failing to equip teams with the knowledge to secure code.
Bad Coding 101: Ensuring Your Website is XSS-Friendly
Follow our whimsical, step-by-step playbook and keep your website gleefully vulnerable for years to come.
Mitigating & Preventing Cross-Site Scripting (XSS) Vulnerabilities: An Example
In the digital world, trust is crucial for businesses to secure customer data and maintain loyalty. Cross-Site Scripting (XSS) is a silent threat that can turn a trusted platform into a launchpad for attackers, stealing sensitive information and spreading malware.
Understanding The 4 Types of Cross-Site Scripting (XSS) Vulnerabilities
Imagine you can see through the eyes of a bank manager without them knowing. You watch as they input the security code, open the gate, and unlock the vault brimming with cash.
Why Investing in Secure Coding Training is More Impactful Than Bug Bounty Programs
Bug bounty programs incentivize ethical hackers to identify and report vulnerabilities. However, prioritizing comprehensive developer training may be more impactful for application security in the long run.
Security Champions are Key to Successful Threat Modeling Facilitation
In this article, we’ll dive into how Security Champions can be your company’s most effective threat modeling advocates and facilitators.
5 Tips for Successful Cybersecurity Threat Modeling at Your Organization
With cybersecurity regularly getting the spotlight, focusing on securing our systems and data has become essential. One of the most efficient ways to start this is with threat modeling. This...
How To Use Threat Modeling to Minimize the Attack Surface of Your Application
As the application security community grows, threat modeling tips are shared daily. But let’s go back to the basics – what is threat modeling? And how does it protect your application?
Make AppSec Training Accessible for Everyone with WCAG
Corporate training builds a competent workforce. AppSec training for secure software. Prioritize accessibility in training.
Security Journey Launches Enterprise-Grade Security and Accessibility Features for World-Class Secure Coding Training Platform
Key product milestones are an industry first, marking a new maturity level in the AppSec education market.