10 Ways Your Organization Can Celebrate Cyber Security Awareness Month
Cybersecurity Awareness Month isn't just about checking boxes; it's about building a security-minded culture where everyone plays a part.
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
Don't Fall for the Hacker Genius: Secure Coding is About Diligence, Not Brilliance
Many believe only brilliant minds can write secure code, but secure coding is primarily about discipline and understanding vulnerabilities. The most significant data breaches in history stemmed from preventable coding errors rather than genius hacking.
Read More
What You Need To Know About Secure Coding Training for PCI DSS v4.0 Requirements
The latest version of the Payment Card Industry Data Security Standard (PCI DSS), version 4.0, was released in March 2022. Although the requirements won't take effect until 2025, it's crucial to start preparing now.
Read More
Learn About ‘Security Culture’
What Engineering Leaders Need to Know About AI Security
The AI revolution is transforming software development at an unprecedented pace, bringing a new wave of security challenges. As engineering leaders, we're not just building the future; we're securing it.
The C-Suite's Guide to AI/LLM Security
C-Suite executives must understand the unique threats posed by AI and LLMs and the potential consequences of security breaches whether your team is building LLMs for AI, or using AI/LLMs tools when coding.
Security Journey vs. Secure Code Warrior [2024]
Choosing the right secure coding training solution for your team can be overwhelming. Security Journey can help. In this article, we compare Security Journey and Secure Code Warrior to help you choose the best option for your organization.
Rewards and Risks of Using AI in Product Security
Security teams are exploring how AI-powered tools can help them address challenges when it comes to secure coding, product security, and even bridging the gap between security and development teams.
Your Guide to Building the Ideal Secure Coding Training Program
We've gathered insights from Security Journey to create a guide for your secure coding training program.
Diversity in InfoSec: How Different Perspectives Strengthen Security
Could the next major security breach be prevented by a more diverse InfoSec team? It's a provocative question, yet one worth asking.
Just-In-Time vs Proactive Secure Code Training: Which One Should You Choose?
In this article, we’ll break down the differences, advantages, and disadvantages of just-in-time vs proactive secure code training.
3 Reasons Why Homegrown Secure Coding Training Falls Short
With the growing need for secure coding practices, many organizations consider homegrown training a cost-effective and tailored solution. However, while it may seem attractive, homegrown training falls short in crucial areas, leaving your organization vulnerable.
Why Investing in Secure Coding Training is More Impactful Than Bug Bounty Programs
Bug bounty programs incentivize ethical hackers to identify and report vulnerabilities. However, prioritizing comprehensive developer training may be more impactful for application security in the long run.
Make AppSec Training Accessible for Everyone with WCAG
Corporate training builds a competent workforce. AppSec training for secure software. Prioritize accessibility in training.
Practical Threat Model Creation: A Step-by-Step Guide & Free Template
Creating a secure product requires prioritizing safety. This guide provides steps for developing a threat model.