Security Champions Field Guide

Tactical AppSec: AI Edition

AI is writing more of your team’s code. Who’s making sure it’s safe?

AI is in the editor, helping write pull requests, and showing up inside the products you build. The mission hasn’t changed — secure code and secure culture are still the job. What changed is the volume and the speed. This field guide gives Security Champions the practical tools to help their teams go fast and stay on the road.

Get the Guide What's Inside

Security Journey Security Champions' Field Guide AI Cover

The mission hasn’t changed. The terrain has.

More code is being written with fewer keystrokes. Now the questions land on your desk:

Is it okay to paste this into the AI?

Has anyone actually read the code the assistant wrote?

Does the package it suggested even exist?

Does our threat model match the system we’re building?

What can the AI features we ship actually do?

Who It's For

Built for the people making security a team sport.

Security Champions

Developers & Engineers

AppSec & Security Teams

Engineering Leaders

Champion Program Leads

What's inside the guide?

A Champion’s handbook for securing code and culture when AI is part of the team.

Know today’s threats

What changed in the OWASP Top 10 (2025) and CWE Top 25 — and how to teach each risk in five minutes.

Threat model with an AI assistant

Hand the blank page to the AI and keep the thinking. A step-by-step STRIDE walkthrough with real prompts.

Review code the AI wrote

Spot the happy paths, invented dependencies, and quiet workarounds AI-generated code tends to ship.

Put security tools to work

Use SAST, DAST, IAST, and RASP to support the team without slowing down the pipeline.

Lead without being the department of “no”

Teach, coach, and spread the message so security becomes part of how your team builds.

Become the AI Champion

Help your team use and build with AI securely and effectively — with a ready-to-use prompt toolkit.