Blog / Best Pratices

  • Who’s responsible for application security? It’s ultimately on the business. More specifically, it’s on the executives and board members that run the business. Still, there must be resources within the organization who not only lead the charge but also get stuff done. It’s complicated, and every situation is different, but this “get stuff done” component is where the answer lies.
  • Recently, we created a checklist, a Web Application Security Checklist for developers. Why? Well, because we want to help developers avoid introducing vulnerabilities in the first place. And for that, the security development process should start with training and creating awareness. Searching for vulnerabilities with a web scanner is essential, but we should always try to make security shift left, i.e. place it at the beginning of the development lifecycle. It is an investment: instead of being reactive, invest in prevention.