Tech Deep Dive

AppSec - Zero Trust in Zero Trust

The other day we were giving developers security training around server side request forgery (SSRF). We see this all of […]

Now that Server-Side Request Forgery (SSRF) has finally made it onto the OWASP Top 10 you may find yourself wondering […]

This post is a quick summary around the Log4J security issues happening in December 2021. It includes a summary, a […]

This post talks about how we approach security automation in BitBucket Pipelines. It also introduces some new open source tools […]

This post talks about how we approach security automation in BitBucket Pipelines. It also introduces some new open source tools we […]

This post talks about how we use different tools to accomplish different tasks in a cloud security context, zooming in […]

Build a comprehensive security program using our proven model.

Schedule a meeting