Empowering DevSecOps - Risk-Driven Security and Scaling Application Security
Discover risk-driven security and scale application security across your organization. Learn threat modeling techniques, identify crucial vulnerabilities, and enable business-wide security partnerships.
Human vs AI: How to Ship Secure Code
Discover how AI tools like GitHub Copilot and ChatGPT can enhance secure coding practices through real-world examples, tips, and best practices for developers.
Zero Trust Principles in DevSecOps
Explore Zero Trust security principles in DevSecOps, focusing on continuous verification, automated tools, and real-time threat detection. Learn implementation strategies and cultural shifts for improved security.
Unveiling Invisible Vulnerabilities: Proactive Strategies for Early Detection
Explore proactive strategies for early vulnerability detection in DevSecOps. Learn how Secure Code Review transforms software security, uncovering hidden threats and fortifying digital ecosystems.
Exploiting and Fixing Vulnerabilities - A Gamified Approach
Discover how gamification and CTFs make application security tangible for developers in cloud-native environments, addressing risks across code, dependencies, containers, and clusters.
Why Most "How-tos" on Scaling DevSecOps Fail and How to Fix It
Explore challenges in scaling AppSec, learn from Razorpay's experience, and gain a practical framework for scaling DevSecOps effectively.
Securing Applications in SDLC and Cloud-Native Web and API Protection - Sessions 1 and 2
Learn secure coding practices, identify vulnerabilities, and integrate security into SDLC. Explore cloud-native WAAP for effective web app and API protection using machine learning.
Securing Applications in the Software Development Life Cycle (SDLC) - Beginner
Aprenda prácticas de codificación segura para mitigar riesgos de seguridad y proteger datos en el desarrollo de software moderno.
Secure Practices with .NET Services
Implement robust security measures for .NET services, including encryption, authentication, and best coding practices to safeguard applications and data against cyber threats.
Writing Powerful Penetration Testing Reports
Learn strategies for crafting effective penetration testing reports, including key components, proof-of-concept creation, and common pitfalls to avoid. Enhance your ability to deliver impactful security assessments.
Defense in Depth: Refocusing on Defensive Security Techniques
Explore defensive product security techniques, emphasizing defense-in-depth and supply chain security. Learn key aspects to consider in your application security strategy.
Securing Software Supply Chains Using the SLSA Framework
Implement SLSA framework to secure software supply chains. Learn practical, vendor-neutral examples for code, build process, provenance, and deployment to create a resilient software development lifecycle.
OWASP LLM Top 10 - Understanding Critical Security Risks for Large Language Models
Explore OWASP LLM Top 10: Gain insights into critical security risks, learn practical steps to fortify applications, and stay ahead in cybersecurity with expert R Nagarjun.
Weaving Application Security's Scale - Enabling Business Through Partnerships
Explore AppSec's growth journey and learn how to scale security across organizations by fostering partnerships and enabling wider business objectives.
Secure Logging Practices: Protecting Sensitive Information in Python Applications
Explore secure logging practices to protect sensitive data in Python applications. Learn to identify, redact, and safeguard confidential information from accidental disclosure in log files.
DevSecOps by Default: Lessons from Log4Shell - What We Have, Can, and Must Learn
Explore DevSecOps strategies post-Log4Shell, focusing on strengthening software supply chains, vulnerability detection, and implementing "Secure by Default" policies using open-source tools.
When Not to Use a Web Application Firewall and Its Alternatives - Lecture
Explore when to avoid Web Application Firewalls (WAFs) and learn their limitations. Understand WAF architecture, common web threats, and alternative security approaches for effective application protection.
Developer Security Essentials
Discover how attackers exploit code vulnerabilities and learn to identify and fix complex security issues efficiently. Participate in a hands-on hacking session to address open source security problems.
Confessions of a Vulnerable Developer: What Developers Need to Know About Security
Explore security basics for developers, learn about free open-source tools, and gain practical knowledge to code confidently while improving software security.
DevSecOps: More Than Just Pipelines
Explore DevSecOps beyond pipelines, covering key concepts, application security, and practical strategies for integrating security into the development lifecycle.
Incident Response for Developers
Learn essential incident response strategies for developers, focusing on security incidents, your role during crises, and effective communication with AppSec teams.