A11y Broke My Build - Shifting Accessibility Left in Development
Discover how to integrate accessibility testing into your development pipeline, shifting it left for early error detection and faster feedback loops.
DevSecOps - Code Security and Vulnerability Reports with Horusec
Explore DevSecOps, integrating security into DevOps culture. Learn implementation stages and see a demo using Horusec for code security and vulnerability reporting.
Removing AWS Policy Review Fatigue with Automated Terraform Resource Analysis
Automate AWS policy control with Terraform resource analysis, reducing security review fatigue and improving developer productivity through early-stage static analysis in IaC pipelines.
Zero Trust Security for APIs
Implement Zero Trust Security for APIs. Learn the model, architecture, and practical steps to protect your API ecosystem from frequent attacks and abuses.
DARCC - The 5 Layers of Modern App Security
Explore the DARCC layers of modern app security: Dependency, Access-Control, Runtime, Configuration, and Container. Learn best practices for securing your software supply chain and enforcing policies.
7 Must-Know Steps to Making Modern Web Apps Ultra-Secure
Learn 7 essential steps to enhance web app security. Master prevention of vulnerabilities, implement secure authorization, add security layers, logging, and testing for robust protection.
How to Start with DevSecOps on Kubernetes
Explore container security implications and strategies for Kubernetes ecosystems. Learn essential controls and best practices to secure containerized workloads in production environments.
MacGyverOps: Secure Your Development Environment with the Tools Around You
Leverage existing tools to create focused security feedback, minimizing distractions while enhancing development velocity and security in DevOps environments.
The State of DevSecOps in 2023 - Challenges and AI Solutions
Explore DevSecOps failures and AI solutions in 2023. Gain insights from Ashish Rajan's 13+ years of cybersecurity experience, focusing on cloud security and enterprise risk management at scale.
Practical DevSecOps Transformation - 5 Key Tips for Building a Successful DevSecOps Program
Discover 5 essential tips for implementing a successful DevSecOps transformation, integrating security into development and operations workflows for robust software delivery.
AI's Impact on Cybersecurity - Episode 135
Explore AI's impact on cybersecurity with Sam Curry. Learn about advancements, potential threats, and appropriate responses to technological progress in the InfoSec world.
Securing Supply Chains in C++, Java and JavaScript - Episode 133
Explore supply chain security across C++, Java, and JavaScript ecosystems. Learn about challenges, dependencies, versioning, and software bill of materials (SBOMs) from industry experts.
Power of AI: DevSecOps and Cloud Artifact Signing Explored - Sessions 1 and 2
Explore AI's impact on DevSecOps and cloud artifact signing. Learn how AI enhances security automation, vulnerability scanning, and threat detection. Discover tools for ensuring trust and integrity in cloud environments.
Exploring Card Games in Threat Modeling - Enhancing Security Posture
Explore innovative card games for threat modeling, including Elevation of Privileges, OWASP Cornucopia, and OWASP Cumulus. Learn how these engaging tools can enhance your organization's security posture through interactive gameplay.
Motivating Developers to Engage in DevSecOps - Hands-on Docker Security
Dive into DevSecOps with hands-on Docker activities, learning to identify and prevent vulnerabilities while strengthening your software security skills.
The Impact of Policy-as-Code on the Software Supply Chain
Explore DevSecOps principles for securing the software supply chain. Learn to automate, version, and implement controls as code for resilient software ecosystems.
A Glimpse into DevSecOps - Building a Secure NodeJS Service
Explore DevSecOps through building a NodeJS service, focusing on security integration throughout development and deployment. Learn practical insights and best practices for robust, secure software creation.
DevSecOps Unveiled: Integrating Security in the Development Lifecycle
Explore DevSecOps principles and practices for seamlessly integrating security into the development lifecycle. Learn to foster collaboration, automation, and shared responsibility for proactive vulnerability management.
Exploiting and Fixing Vulnerabilities - A Gamified Approach
Discover how gamification and CTFs make application security tangible for developers in cloud-native environments, addressing risks across code, dependencies, containers, and clusters.
Building Your First DevSecOps Pipeline
Demystify DevSecOps and build a functional pipeline with cutting-edge security testing, including SCA, SAST, and DAST tooling. Supercharge software security and achieve true "Shift Left" success.
5 Open Source Security Tools All Developers Should Know About
Discover five essential open-source security tools for CI/CD pipelines. Learn to integrate SAST, secrets detection, SCA, IaC security, and DAST with practical code examples and demos.