Today, we bring you our latest collaboration with the OWASP Orange County chapter, where Daniel Blazquez, our Technical Product Marketing Lead, presented a talk on “The beauty of runtime AppSec done right”. In this talk, we looked at how AppSec practices seem to waver between static and runtime activities. Static activities such as code scans […]
Today, we are excited to announce a strategic partnership with Snyk, the leader in developer security. Our goal with this partnership is to combine our runtime analysis with Snyk’s static analysis capabilities, which include the best proprietary vulnerability database. The modern Software Development Lifecycle (SDLC) is becoming more and more complex, driven by the acceleration […]
In this edition of the BORNSECURE Security Influencers podcast, we talk to Nicolas Chaillan, the first US Department of Defense CISO, and the architect behind one of the most complex DevSecOps engagements in the world. During the conversation, we discuss topics such as: The reasons why Zero Trust and high permission granularity are the key […]
The OWASP Foundation just released a 2021 refresh of the Top 10 ranking, and since it has the power to bring attention to specific web development aspects and contribute to improving the quality of web software, we wanted to analyze the most significant changes. Table of contents What is the OWASP Top 10? How is […]
SonarQube, a popular open-source code quality tool that also performs security analysis, can be a great fit for most teams and we do not discourage its usage. However, it will fall short for teams that consider security an important requirement and will have to be complemented or replaced by stronger security analysis tools. Table of […]
In this edition of the BORNSECURE Security Influencers podcast we talk to Larry Maccherone, one of the most respected forces pushing for the adoption of agile methodologies and security automation. During the conversation we discuss topics such as: How Larry’s background as a developer influenced his thinking on application security, including the equivalence of a […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
