Security Journey Blog

Application Security

How To Use Threat Modeling to Minimize the Attack Surface of Your Application

As the application security community grows, threat modeling tips are shared daily. But let’s go back to the basics – what is threat modeling? And how does it protect your application? 

Read More - How To Use Threat Modeling to Minimize the Attack Surface of Your Application

Application Security Security Culture

Make AppSec Training Accessible for Everyone with WCAG

Corporate training builds a competent workforce. AppSec training for secure software. Prioritize accessibility in training.

Read More - Make AppSec Training Accessible for Everyone with WCAG

Security Journey News

Security Journey Launches Enterprise-Grade Security and Accessibility Features for World-Class Secure Coding Training Platform

Key product milestones are an industry first, marking a new maturity level in the AppSec education market.

Read More - Security Journey Launches Enterprise-Grade Security and Accessibility Features for World-Class Secure Coding Training Platform

Application Security

Boost Your Security with These 3 Game-Changing Threat Modeling Tools

In this blog post, we will explore three top threat modeling tools: Microsoft Threat Modeling Tool, IriusRisk, and OWASP Threat Dragon. 

Read More - Boost Your Security with These 3 Game-Changing Threat Modeling Tools

Application Security OWASP

Top 10 Biggest Security Threats to Your Products

Mike Burch and his team took the time to evaluate these lists and compile what we believe is a list to rule them all – the biggest threats to our products across the different technologies. 

Read More - Top 10 Biggest Security Threats to Your Products

Application Security Security Culture

Practical Threat Model Creation: A Step-by-Step Guide & Free Template

Creating a secure product requires prioritizing safety. This guide provides steps for developing a threat model.

Read More - Practical Threat Model Creation: A Step-by-Step Guide & Free Template

Application Security

Enhance Your Security: Unveiling the 3 Key Benefits of Threat Modeling

It is crucial to prioritize security throughout the entire lifecycle of a product or application, from conception to release. Threat modeling is an essential step in this process.

Read More - Enhance Your Security: Unveiling the 3 Key Benefits of Threat Modeling

Security Journey News

Security Journey Announces New AI/LLM and API Learning Paths to Teach Development Teams How to Build Software Securely

New training efficiently addresses the industry’s identified risks in API and AI LLM software. 

Read More - Security Journey Announces New AI/LLM and API Learning Paths to Teach Development Teams How to Build Software Securely

Secure Coding Training

In-House vs. Vendor: Which is the Best Way to Provide Secure Coding Training?

In this article, we will compare the experience of creating in-house secure coding training with hiring an external vendor, including the associated costs and value. 

Read More - In-House vs. Vendor: Which is the Best Way to Provide Secure Coding Training?

Security Culture

AI Dreams Are About the Teams

This article was written by Michael Erquitt, Senior Security Engineer at Security Journey.

Read More - AI Dreams Are About the Teams

Compliance & Regulations

Regulation is Sabotaging Security: Here's What Needs to Change

In the rapidly evolving world of software development, security concerns often take a back seat to the pressing demands of time-to-market pressure. 

Read More - Regulation is Sabotaging Security: Here's What Needs to Change

Security Journey News

Adam Bruehl Of Security Journey On Why the US Government is Getting Serious About Medical Device Cybersecurity

In an era where technology is revolutionizing healthcare, medical devices — from pacemakers to insulin pumps to hospital imaging machines — are becoming increasingly interconnected. While these advancements offer unprecedented benefits, they also expose healthcare systems and patients to new cybersecurity risks. 

Read More - Adam Bruehl Of Security Journey On Why the US Government is Getting Serious About Medical Device Cybersecurity