Get the Easy Wins. Stop Hiding from the Hard Ones.
Balancing priorities between fixing security findings and product impact is a difficult exercise.
top of page
Hub
Learn about application security from experts & innovators
Brian Pavicic
- Dec 8, 2022
- 5 min
The Next Evolution of Browser-Based Penetration Testing Kits: OWASP PTK
There are far too many competing tools in application security and not enough that are great. One tool aims to rise above them all and has p
4400
Brian Pavicic
- Nov 29, 2022
- 5 min
How to Avoid the AppSec Staffing Crisis in 2023
Routes to real progress and success exist beyond outdated and painful hiring practices.
420
Brian Pavicic
- Oct 3, 2022
- 3 min
Modern AppSec Means Doing More with Less
Get tips for stretching your security budget without letting vulnerabilities go unnoticed The Government is Stepping Up Security...
330
Brian Pavicic
- Sep 7, 2022
- 1 min
We have exciting news for the AppSec community!
True Positives unveils enterprise quality AppSec scanning on demand --- starting at FREE. Meet our new AppSec product/service hybrid,...
380
Evan Oslick
- Jul 11, 2022
- 4 min
How to Navigate the Maze of AppSec Tools in 2023
The number of tools for performing various application security tests is increasing at a very rapid rate. We’ve gone from the big...
410
Clayton Dewberry
- Jun 29, 2022
- 3 min
Don't Wade in Alone! AppSec Waters are Perilous!
I enjoy fly fishing, but I’m not that good at it. It’s not my full-time sport, nor my day job, so when I go out for some “fun” it can be...
440
Brian Pavicic
- Jun 23, 2022
- 3 min
The Secret to AppSec Shortcuts
Security scanners are great but only when used properly with a company that truly assesses their own security. Shortcuts can be risky. Read
220
Brook S.E. Schoenfield
- Jun 17, 2022
- 4 min
A Better Vulnerability Mousetrap
EPSS won’t save you from building defenses. But it will help to manage large unpatched vulnerability queues so that the probably dangerous i
1030
Brian Pavicic
- May 11, 2022
- 5 min
Modern AppSec Survival Guide: 5 Tips for Program Success
There’s no easy path to success for a modern AppSec program. You’ll absolutely fail if you don’t come prepared and have the right tools...
1580
Our Monthly Newsletter, PracticalAppSec!
Hone your AppSec SuperPowers with tips and tricks to tighten security and manage your budget, and so much more!
bottom of page