The Canonical Secure SDLC Blog

Core tenets of Secure SDLC

In today's digital world, secure software development is not just an option—it's a necessity. With cyber threats constantly evolving,...

OWASP Top 10 vulnerabilities & STRIDE

The STRIDE threat model is a framework that helps identify and categorize security threats. STRIDE stands for Spoofing, Tampering,...

OWASP Top 10 2021: The Most Critical Web Application Security Risks

The Open Web Application Security Project (OWASP) is a non-profit organization dedicated to improving software security. OWASP releases a...

Secure Design Analysis: Empowering Humans for Optimal Results

Designing secure systems is a complex and still largely manual process. While automation helps streamline some aspects, making the entire...

Shift-Left starts at Build, & that's a problem.

While Shift-Left is a big buzz in secure software development that aims to move security considerations earlier in the development...

Product