DeveloperWeek 2018

Coding securely to prevent vulnerabilities and bugs is critical to improving the overall security posture of your company. Developers have the power to add an additional layer of security to your company or conversely, the potential to plummet your company’s stock prices. 

In this session, we will look into the application security market and share a number of options we have figured out to help organizations to achieve secure code.  We dive into the trade-offs application security managers make between different spending buckets and their effectiveness. Spending the entire AppSec budget on detection including penetration testing and static analysis is sub-optimal, but so is spending the whole budget on prevention, including training developers What is a good split? We determine this based on data gathered and analyzed.

We will demonstrate how developers can learn about security in a way that is more engaging and relevant than traditional security training. There is an option for companies to scale secure coding excellence across their organization as individuals and teams easily build and verify their application security skills, gain real-time security advice and monitor skill development. We will also take a sneak peek at Secure Code Warrior’s latest feature, Sensei, which guides developers in real-time to write secure code faster and more consistently, without needing to become security experts.