Secure Coding

Best Practices to Code Securely

Tips to help you stay on top of secure coding requirements.

Major Financial Institution Makes SD Elements Part of Standard Development Process to 7000 Applications

A Large Technology Client Uses SD Elements to Manage Compliance with Internal Secure Coding Standards for Nearly 80% of Applications

Choosing the Right Security Requirements Solution for your Organization

Imagine turning on the radio and discovering that there is only one radio station playing one artist who has the only musical instrument in the world. Now imagine that radio is the only way to...

A World with Security-Minded Developers: What Will It Take?

Pranoy De, Solutions Engineer at Security Compass, tells us what it's like to take on security as an engineer.

SD Elements Minimizes Security Risks in Software Built by 3rd Party Developers

SD Elements can be used to reduce security risk in software developed by 3rd parties in your organization.

Find and Fix Your Application Security Pain Points

It can be tough creating and implementing a secure application development process. There are so many project-specific vulnerabilities and requirements that it’s hard to make sure you’re covering...

Three Ways to Manage Security in Agile/DevOps

DevOps, the word, is a combination of “development” and “operations”. It represents more than just a team or a process or an idea. DevOps is actually an organizational culture or practice aimed at...

Easing Security into Unique Development Environments

Richard Sanchez is a patient at the Eye Associates of Pinellas. Mr. Sanchez was told earlier in June that his personal and health information may have been stolen when Bizmatics, a software vendor...

Top 5 Benefits of Role-based Security Training for Developers

Software fulfills many critical roles in business today — from generating revenue to increasing operational efficiency. Software engineering teams face growing development queues and pressure to...

Vishal Asthana quoted in Techbeacon article 'OWASP Top 10: What's missing for enterprise app sec'

Learn about what security expert, Vishal Asthana thinks is missing in enterprise app sec.

3 Reasons Why a One-size Fits all Secure SDLC Solution Won’t Work

3 Reasons Why a One-size Fits all Secure SDLC Solution Won’t Work When we ask security contacts at our enterprise clients “What software development methodology does your company use?”, they...

Open Web Application Security Project Top 10

The OWASP Top 10 focuses on security concerns for web applications. Read on to learn more about these mainstream security concerns.

How to Automatically Verify Security Requirements: SD Elements & Fortify Integration

We’re excited about our integration with Fortify. It follows on our recent Veracode integration. With these integrations a company can automatically create a set of tailored security requirements...

Beyond OWASP Top 10 Vulnerabilities

We discuss 3 vulnerabilities that don’t fit into the OWASP Top 10 categories but are just as dangerous if present in a web application.

4 Reasons Why You Should Define Software Security Requirements for Mature Applications

There’s a common misconception that security requirements are only useful for net new applications. Most people think once an application has been developed, it’s too late to introduce new...