OWASP Top 10 Proactive Controls
Instead of chasing threats, it pays to be proactive. OWASP noticed the increase in technology's complexity and interconnectivity and recognized that it would become more difficult to secure our...
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
Developer-Tailored Secure Code Training: A New Approach from Security Journey
Security training for developers has traditionally been a one-size-fits-all experience—generic, compliance-driven, and...
New Content for Your Most Pressing & Emerging Vulnerabilities: AI/LLM & CWE Top 25
At Security Journey, we continuously evolve our training content to help organizations stay ahead of the most pressing...
Learn About ‘OWASP’
API Security is NOT Optional: Why the OWASP API Top 10 is Your New Priority
APIs are crucial in modern software, facilitating app integrations and microservices. However, their widespread use increases the attack surface, with each endpoint posing a potential risk for exploitation and data breaches.
Top 10 Insecure Software Development Techniques to Avoid (and What to Do Instead)
The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI recently released a joint guide highlighting exceptionally risky software development practices that all organizations should avoid.
APIs Under Attack: The C-Suite's Guide to Protecting Your Digital Assets
If you're a nontechnical executive, you might not be fluent in the language of code, but you understand the language of risk. And the risks associated with API vulnerabilities are real and growing.
For CISOs: Why API Security Training is Your Best Investment in 2024
The OWASP API Security Top 10 list highlights the most critical API security risks, and the recent surge in API-related breaches underscores the urgent need for proactive security measures.
From Zero to API Security Hero: The SJ OWASP API Top 10 Training Roadmap
In the interconnected landscape of APIs, robust security is non-negotiable to prevent devastating consequences such as data breaches, financial losses, and reputational damage.
AppSec Redefined: What 20 Years of Failure Has Taught Us
The application security industry faces stagnant defenses against evolving threats. The OWASP Top 10 list of critical web application security risks has remained the same for years, despite persistent patterns in data breach reports.
Top 10 Biggest Security Threats to Your Products
Mike Burch and his team took the time to evaluate these lists and compile what we believe is a list to rule them all – the biggest threats to our products across the different technologies.
Free Security Awareness and Education Program for Cybersecurity Awareness Month
Security Journey’s Diligent Developer Program champions hands-on training in breaking and fixing code to provide the skills development teams need to code securely.
OWASP Top 10 Server-Side Request Forgery Explained
This article will review Server-Side Request Forgery, commonly known as SSRF, and how you can protect against SSRF attacks.
Security Journey launches “The Diligent Developer” Limited Time Free Security Education Program
The Diligent Developer program provides product access and resources on OWASP Top 10 in support of National Coding Week.
OWASP Top 10 Software and Integrity Failures Explained
This article will review what Software and Integrity Failures are and provide recommendations for protecting against them.