Security Journey AppSec Resources

Expertly crafted content to help you run an effective security training program for everyone in your SDLC.

Download Our Overview Brochure

Filters

6 Questions You Should Be Asking About Product Security

This guide offers essential insights and actionable steps to enhance your organization's software security. It addresses key questions about secure coding practices and fosters a security-conscious culture.

Learn More

A Study on Secure Coding Training

This study aims to understand the state of secure coding training and provide insights into how organizations are attempting to improve software security in the face of increasing regulatory pressure.

Learn More

Zoom Selects Security Journey to Drive Application Security Excellence

Discover how Zoom transformed their application security training with Security Journey.

Learn More

Webinars

Security Journey offers robust application security education tools to help developers and the entire SDLC team recognize and understand vulnerabilities and threats and proactively mitigate these risks. The knowledge learners acquire in our programs goes beyond helping learners code more securely – it turns everyone in the SDLC into security champions.

Learn more

Tactical AppSec: An AI Security Field Guide

Tactical AppSec: An AI Security Field Guide is a hands-on guide built for real leaders. You’ll cut through the noise, uncover where AI is showing up, and put practical governance in place, fast. Whether you're flying solo or driving org-wide strategy, this is your battle plan to lead with confidence and keep innovation secure.

Learn More

Seven Steps to an Ideal Secure Coding Training Program

This guide shares practical strategies and actionable steps for planning, implementing, and maintaining an effective secure coding training program.

Learn More

resource_library_educationvawareness_ebook

Cybersecurity Education vs. Awareness

Data breaches and application attacks have severe consequences. Human involvement is critical for secure code release, alongside tools and automation.

Learn more

Roger Grimes - Quantum Security

Roger A. Grimes, Data-Driven Defense Evangelist for KnowBe4, Inc., is the author of 15 books and over 1500 articles. He specializes in host security and preventing hacker and malware attacks.

Listen Here

Leading Visitor Management Solution Meets PCI Secure Coding Training Compliance

Learn how this Leading Visitor Management Solution used Security Journey's solution to save time on SOC2 Compliance reporting and to get their developers more engaged with their application security.

Learn More

How a Fintech Streamlined PCI DSS Requirement 6.5 and Increased Developer Engagement

Learn how this organization streamlined their PCI DSS requirements while engaging developers.

Learn More

Dustin Lehr - Code, Culture, and Community

Dustin Lehr joined Security Journey as Director of Application Security Advocacy. With nearly two decades of experience as a software engineer, application architect, and cybersecurity leader, Dustin has ample expertise in the industry.

Listen Here

Six Steps to Meet Compliance and Shift Your Culture

This paper examines the implications of PCI DSS 4.0 for development teams and outlines six actionable steps for organizations to ensure compliance.

Learn more

Code or Be Conquered: Preparing Developers for Cyber Threats in the Age of AI

This SC Media panelcast, sponsored by Security Journey, brings together secure development experts and AppSec leaders to explore what it takes to embed lasting, secure coding behaviors across the software lifecycle.

Watch Here

Threat Modeling Worksheet

You can use the STRIDE model to identify potential threats to your product and the DREAD model to prioritize them.

Learn More

David Kosorok - Mastering Application Security

David Kosorok, the Director of Information Security Programs at Toast, Inc., has over 25 years of experience in software and security testing, including more than 16 years dedicated to security.

Listen Here

Secure Coding Practices – Growing Success or Zero-Day Epidemic?

EMA surveyed 129 professionals across multiple industry verticals, seeking to understand how organizations are tackling the difficult challenge of developing secure software applications.

Learn More

Checklist for Evaluating Secure Coding Training Platforms

There are several secure coding training platforms available, each with unique philosophical and design foundations.

Learn More

Adam Bruehl - Secure Code in Medicine

Adam Bruehl, a Senior DevOps Engineer at Security Journey, has a unique blend of expertise ranging from biology to technology.

Listen Here

resource_library_SecureCodingInjection_ebook

Secure Coding Report: Injection Vulnerabilities

Derek Brink, VP and Research Fellow at Aberdeen Strategy and Research analyzed 140k HackEDU Hands-on exercises for training software developers to identify and fix Injection vulnerabilities.

Learn More

Tactical AppSec: Champions Field Guide

Tactical AppSec: A Champions' Field Guide is your hands-on playbook, crafted specifically for developers and champions like you—those who write, review, deploy, and secure code. It’s designed to meet you where you are, helping you tackle real-world security challenges with practical, actionable solutions.

Learn More