Supply Chain Security: Trust Is the New Attack Surface

Securing the software supply chain requires continuous validation of trust, not just reliance on outdated third-party risk practices.

Many Hands Approach To AppSec

Discussion on practical strategies for rolling out an effective application security program and balancing security with development efficiency.

Quick Bites Episode 11 – Ranking Application Risks

Learn how to rank the risk associated with vulnerabilities in your application, then prioritize the risk based on criticality.

What does PCI require for Developer Training?

Understand what the PCI DSS requires for annual developer training.

Application Security 101

Application security is a big job, for sure.  And it’s not just the job of the developers or the SOC.  There is an incredible amount of surface to cover.

AppSec Cheat Code: Shift Left, Shift Right, Up, Down & Start

Seamless and unobtrusive security is the future. We are huge advocates of shifting left and moving security testing earlier in the development process.