GitHub Articles
What is threat modeling?
Threat modeling is a structured approach to identifying, analyzing, and mitigating security risks in software applications and IT systems before they become vulnerabilities.
What is software composition analysis (SCA)?
Discover how software composition analysis (SCA) tools improve the security, quality, and efficiency of your open source software.
What is shift left?
Shift left is a pivotal practice in software development that reduces costs, drives efficiency, and strengthens application security across the software development lifecycle. Discover how this approach helps teams find and fix software issues early, accelerating development, and improving software quality.
What is security testing?
Read this guide to learn about the types of security testing along with best practices and trends for greater software security. You’ll explore the role of automated security testing tools, including AI-powered tools, and see the importance of incorporating security testing into every phase of software development.
What is risk-based vulnerability management (RBVM)?
Discover how risk-based vulnerability management (RBVM) helps organizations focus on the most critical security risks to optimize protection and allocate resources effectively.
What is a software bill of materials (SBOM)?
Software is built in layers. An SBOM shows what’s inside—so you can secure it.
Application security posture management (ASPM)
Protecting against digital threats is as crucial as protecting physical assets. Just like a guard vigilantly protects a building from intruders, ASPM helps protect applications from digital threats, safeguarding them against cyber threats throughout their lifecycle.
What is runtime application self-protection (RASP)?
Learn how runtime application self-protection (RASP) safeguards software applications against runtime attacks. Explore the features and benefits of RASP and how it complements other solutions to enhance application security.
Mobile application security
Mobile application security safeguards against threats like reverse engineering attacks, tampering, malware, and data theft. Security breaches risk financial loss and damage to brand credibility. To get the most out of mobile application security, it’s important to understand how it works and how to implement best practices.
What is fuzzing and fuzz testing?
Learn how to detect software flaws and security vulnerabilities with fuzzing. Explore fuzz testing techniques, strategies, and best practices you can apply to your software development lifecycle.
What is Cross-Site Scripting (XSS)
Cross-site scripting (XSS) is a persistent threat to web security. Understanding its types, mechanics, and impact is key to adopting effective prevention strategies.
What is vulnerability scanning?
Vulnerability scanning is a proactive security assessment process that’s used to identify security weaknesses and vulnerabilities within software applications, networks, or systems. Vulnerability scanners are software applications that automatically scan and assess various aspects of systems, devices, code, configurations, and dependencies connected to a network, as well as operating systems running on those devices and related attributes like user accounts and permissions, services, and open ports.