How to “Shift-Left” SAST scans (Semgrep as an example)

Why “Chainguard Images” is a game-changer for container vulnerabilities

Threat modeling Handbook #3: The Thought process behind identifying threats (with an Example)

Threat Modeling Handbook #5: Convert your threat model into an automated pentest using DevSecOps tools (with…

Threat modeling Handbook #1: What is a threat model and why your service needs one

I remember a few years ago when I was newly interested in Application Security “threat modeling” was one of those things everyone was saying must be done, but no one was saying enough about…

I asked “ChatGPT” how to threat model features using LLM

Threat Modeling Handbook #2: Threat modeling is a process, not a document

How I contributed my first custom rule to Semgrep Rule Registry

Threat modeling Handbook #4: How to get better at Threat modeling

Threat Modeling Handbook #6: Agile Threat Modeling