Security Resources

10 best practices for securely developing with AI

This blog post will guide you through the best practices for developing with AI securely, focusing on AI-assisted applications, AI-assisted development, and general tips for productive software development with AI.

Top considerations for addressing risks in the OWASP Top 10 for LLMs

Welcome to our cheat sheet covering the OWASP Top 10 for LLMs where we'll explore the top security risks identified by OWASP.

10 Security Considerations when Migrating to AWS Cheat Sheet

Learn about 10 different ways AWS security considerations you should keep in mind to make the move easy and secure.

Code to cloud and back to code

This white paper explains how application and cloud security can come together to deliver more secure cloud native applications, while remaining fast and secure.

How to Conduct an Application Security Assessment

Download this cheat sheet to learn about the five steps you need to take for an effective AppSec assessment in your organization.

Top SAST and SCA Considerations for Security Professionals

Download this guide to learn about the critical aspects of a well-rounded AppSec program that security professionals should consider when choosing (SAST) and (SCA) tools.

Top considerations when evaluating SAST tools

Download this guide to learn about the key aspects to look out for when choosing your SAST solution.

Guide to Choosing a SAST Solution

Download this guide to learn the recommended 4 phase process for testing & selecting a code security tool.

Local Type Inference Cheat Sheet for Java 10 and beyond!

One of the main features in Java 10 in Local Type Inference, which allows us to substitute a type with the var reserved word in our source code. However, in order for this to become a feature that is useful to a developer rather than a feature developers will rue for many years to come, we need to learn how to use it and when to use it properly. This cheat sheet and blog is a reduced version of an blog post that Stuart Marks wrote on the OpenJDK site.

10 GitHub Security Best Practices

In this cheat sheet, we will discuss ten best practices you can implement to improve your GitHub security. Download the one-pager and read on for a more extensive explanation of all ten curated actions.

Zip Slip Vulnerability Cheat Sheet

Zip Slip is a form of a Directory Traversal that can be exploited by extracting files from an archive. This cheat sheet informs you of vulnerable libraries and code snippets that are exploitable to a Zip Slip attack. Additionally it provides you with the information you need to upgrade to fixed library versions and offers tips on how to find and fix your own vulnerable code.

10 Spring Boot security best practices

This month’s cheat sheet is about how you can secure your Spring Boot application. Spring Boot has dramatically simplified the development of Spring applications. Its autoconfiguration and starter dependencies reduce the amount of code and configuration you need to begin an app. If you were used to Spring and lots of XML in back in the day, Spring Boot is a breath of fresh air.