SECURITY IS AWESOME

Setup a continuous integration pipeline with automated ZAP scanning on a vulnerable application. A complete guide.

Walkthrough setting up Jenkins, SonarQube, and Dependency check with an out of the box docker configuration for rapid startup.

A roadmap for automating security tooling and integrating with agile development teams to improve security outcomes.

About the test results of all popular Mozilla Firefox plugins. This post outlines the test methodology and code

A walkthrough of people finding using public information to find details of their life and history. Also known as doxing or OSINT.

Security advice for everyday usage - tech tools and systems.

Analyzing 2000 applications for the critical 50 to focus on for a secre development program. How to slice data and ask the right questions.

Let's walk through setting up a modern application security program from scratch, starting with the high level strategy and metrics.

Steps anyone can use to detect browser plugin spying, even when they try to hide it.

In this article, we will tread a middle path, and look at some ways to manage a web server securely for a variety of common deployment scenarios.