GitHub Articles
What is threat modeling?
Threat modeling is a structured approach to identifying, analyzing, and mitigating security risks in software applications and IT systems before they become vulnerabilities.
What is shift left?
Shift left is a pivotal practice in software development that reduces costs, drives efficiency, and strengthens application security across the software development lifecycle. Discover how this approach helps teams find and fix software issues early, accelerating development, and improving software quality.
What is security testing?
Read this guide to learn about the types of security testing along with best practices and trends for greater software security. You’ll explore the role of automated security testing tools, including AI-powered tools, and see the importance of incorporating security testing into every phase of software development.
What is secret scanning?
In today's digital landscape, protecting sensitive information is crucial for maintaining the integrity and security of an organization’s software systems.
What is runtime application self-protection (RASP)?
Learn how runtime application self-protection (RASP) safeguards software applications against runtime attacks. Explore the features and benefits of RASP and how it complements other solutions to enhance application security.
What Is Incident Response?
In today’s evolving threat landscape, a robust incident response plan is essential to minimize damage, protect sensitive data, and ensure business continuity.
What is fuzzing and fuzz testing?
Learn how to detect software flaws and security vulnerabilities with fuzzing. Explore fuzz testing techniques, strategies, and best practices you can apply to your software development lifecycle.
What is Cross-Site Scripting (XSS)
Cross-site scripting (XSS) is a persistent threat to web security. Understanding its types, mechanics, and impact is key to adopting effective prevention strategies.
What is application security and how does it work?
Application security, sometimes shortened to AppSec, refers to the security measures used to protect software from unauthorized access, use, disclosure, disruption, modification, or destruction. The practice of AppSec implements safeguards and controls to protect software from cyberthreats, and to ensure the confidentiality, integrity, and availability of the application and its data.
Mobile application security
Mobile application security safeguards against threats like reverse engineering attacks, tampering, malware, and data theft. Security breaches risk financial loss and damage to brand credibility. To get the most out of mobile application security, it’s important to understand how it works and how to implement best practices.
Application security posture management (ASPM)
Protecting against digital threats is as crucial as protecting physical assets. Just like a guard vigilantly protects a building from intruders, ASPM helps protect applications from digital threats, safeguarding them against cyber threats throughout their lifecycle.