Reality Checking Your AppSec Program
Explore strategies to critically assess and improve your AppSec program, focusing on compliance, maturity, education, and validation beyond traditional metrics and assumptions.
The AppSec Starter Kit
Learn essential tools and techniques for application security, including vulnerability assessment and penetration testing, from expert Timothy De Block.
My First Year in Application Security
Insights and experiences from a first year in application security, offering valuable lessons and perspectives for those entering or interested in the field.
Modern AppSec Gotchas
Explore 12 modern application security challenges and learn effective prevention strategies for web developers and security professionals.
Six Ways to Improve SQL Server Application Security
Explore six mindsets for enhancing SQL Server application security, covering encryption, key management, data governance, and more. Gain actionable strategies to improve database development security.
50 Shades of AppSec
Explore diverse AppSec challenges, from social hacking to obscure attacks, gaining insights to stay ahead in the rapidly evolving cybersecurity landscape.
Web Application Security - Browsers Fight Back
Explore browser-based security measures like XSS filters, HTTP headers, and protocols to prevent common web application vulnerabilities and enhance overall protection.
Web Application Security Risks - A Look at OWASP Top Ten 2017
Explore the latest OWASP Top Ten 2017 security risks for web applications. Learn about changes, updates, and best practices for creating secure web applications in this comprehensive overview.
Beyond the OWASP Top 10 - Modern Web Application Bugs
Explore modern web application vulnerabilities beyond OWASP Top 10, including XML External Entity, Serialization, and Server-side Request Forgery. Learn detection and mitigation strategies for emerging security threats.
Web Application Security Trends
Explore modern web security threats beyond traditional attacks, including vulnerabilities in Angular, Clickjacking, and XSS via file uploads. Stay updated on evolving risks and defense strategies.
The Future of AppSec is Cloud-Native
Explore cloud-native technologies' impact on application security, transforming DevSecOps from blocker to enabler. Learn tools and processes for enhanced visibility, vulnerability discovery, and feedback loops.
AppSec for Everyone
Explore key components and best practices for building robust application security programs, focusing on rapid implementation for organizations new to app development.
Cover Your Apps: The Three Pillars of Application Security
Explore the three foundational pillars of Application Security (AppSec) to enhance your software development practices and create safer solutions.
Application Security from Start to Finish
Comprehensive guide to integrating security throughout the development process, covering secure environments, dependency management, vulnerability scanning, and advanced testing techniques.
AppSec and Microservices
Explore microservices security with Sam Newman, covering attack vectors, prevention tools, and real-world breach examples to enhance your application's protection strategies.
AppSec is Too Hard
Explore common AppSec pitfalls, robust security approaches, and practical examples to improve application security and make it more manageable at scale.
Techniques for Escaping the AppSec Labyrinth
Explore effective strategies for navigating complex application security challenges and overcoming obstacles in the ever-evolving AppSec landscape.
A Data Driven Approach to Application Security
Explore strategies for managing security alerts from multiple sources, aggregating data, and transforming information overload into actionable insights for both team and company-wide application security.
Test Driven Application Security
Explore test-driven application security with automated tests to validate defenses. Learn to prevent OWASP TOP 10 vulnerabilities through clear requirements and security-focused testing in C# and ASP.NET Core 6.
Transformation Blueprint for Developer-Centric Application Security
Practical guide for shifting to developer-centric application security, based on experience with 600+ teams. Covers mindset, tools, metrics, and practices adapted for modern development.
API Security - Top 10 Essential Actions in 30 Minutes per Week
Discover essential API security priorities and high-impact actions to implement in time-constrained environments, focusing on preventing data breaches with maximum efficiency.