Application Security

Secure SDLC, SAST/DAST/SCA, API security, container and supply chain security, and secrets detection.

Topics

Lessons

OWASP API Top 10, rate limiting, schema validation, auth patterns

Image scanning, admission control, SBOM, Sigstore

Static analysis, dynamic scanning, dependency checking

Pre-commit hooks, pipeline scanning, credential leak prevention

Threat modeling, security requirements, secure coding standards