Application Security News, Tutorials & Tools

Security Spotlight

View Latest Security Articles

Everything You Need to Know About Web Pentesting: A Complete Guide
by Varsha Paul

It's critical to ensure that your website is secure if you're running one. Hackers are always looking for vulnerabilities to exploit, and if they can find one on... More

{{ stats[3253001].portal.title }} · {{ stats[3253001].clicks }} clicks · · {{ stats[3253001].timesInEdition }}x

Refcard #381

Threat Detection for Containers

by Boris Zaikin CORE

{{ stats[3247774].portal.title }} · {{ stats[3247774].clicks }} clicks · · {{ stats[3247774].timesInEdition }}x

Apache Kafka in Crypto and Finserv for Cybersecurity and Fraud Detection

by Kai Wähner CORE

{{ stats[3247553].portal.title }} · {{ stats[3247553].clicks }} clicks · · {{ stats[3247553].timesInEdition }}x

Securing Container Base Images Using Kyverno Policies

by Ritesh Patel

{{ stats[3251719].portal.title }} · {{ stats[3251719].clicks }} clicks · · {{ stats[3251719].timesInEdition }}x

The 2-Minute Test for Kubernetes Pod Security
by Jim Bugwadia CORE

In this post, I will show you how to audit your clusters for compliance with the latest Kubernetes Pod Security Standards without installing anything in the cluster.... More

{{ stats[3251718].portal.title }} · {{ stats[3251718].clicks }} clicks · · {{ stats[3251718].timesInEdition }}x

Refcard #380

Continuous Delivery Pipeline Security Essentials

by Sudip Sengupta CORE

{{ stats[3245533].portal.title }} · {{ stats[3245533].clicks }} clicks · · {{ stats[3245533].timesInEdition }}x

Auth0 (Okta) vs. Cognito

by Anastasiia Komendantova

{{ stats[3252197].portal.title }} · {{ stats[3252197].clicks }} clicks · · {{ stats[3252197].timesInEdition }}x

Cloud Security Audit Tools: A Glance, Why It's Important, Top Tools and Techniques

by Varsha Paul

{{ stats[3252707].portal.title }} · {{ stats[3252707].clicks }} clicks · · {{ stats[3252707].timesInEdition }}x

Application Security

{{ stats[3161362].portal.title }} · {{ stats[3161362].clicks }} clicks · · {{ stats[3161362].timesInEdition }}x

You Are Blind to the Risks in Your Cloud — Why Companies Need Cloud Security Monitoring

by Eric Kedrosky

{{ stats[3240838].portal.title }} · {{ stats[3240838].clicks }} clicks · · {{ stats[3240838].timesInEdition }}x

What Is the Difference Between SAST, DAST, and IAST?

by Aleksey Sarkisov

{{ stats[3250831].portal.title }} · {{ stats[3250831].clicks }} clicks · · {{ stats[3250831].timesInEdition }}x

Secure Your Web Apps With an API Gateway

by Nicolas Fränkel CORE

{{ stats[3246613].portal.title }} · {{ stats[3246613].clicks }} clicks · · {{ stats[3246613].timesInEdition }}x

Proof of Stake Alternatives Every Developer Should Know Of

by Ryan Kh

{{ stats[3250471].portal.title }} · {{ stats[3250471].clicks }} clicks · · {{ stats[3250471].timesInEdition }}x

A Comprehensive Guide to Cloud Application Security Audits

by Varsha Paul

{{ stats[3247282].portal.title }} · {{ stats[3247282].clicks }} clicks · · {{ stats[3247282].timesInEdition }}x

Securing Your Cloud with Zero Trust and Least Privilege

by Diane Benjuya

{{ stats[3241071].portal.title }} · {{ stats[3241071].clicks }} clicks · · {{ stats[3241071].timesInEdition }}x

4 Major Steps Of Web Application Penetration Testing

by Philip Piletic CORE

{{ stats[3247558].portal.title }} · {{ stats[3247558].clicks }} clicks · · {{ stats[3247558].timesInEdition }}x

Securing Kubernetes Secrets With HashiCorp Vault

by Nikhil Purva

{{ stats[3242312].portal.title }} · {{ stats[3242312].clicks }} clicks · · {{ stats[3242312].timesInEdition }}x

View All Security Articles

Building Maintainable and Scalable Software

Learn design patterns quickly with Jason McDonald's outstanding tutorial on the original 23 Gang of Four design patterns, including class diagrams, explanations, usage info, and real world examples.

Jason McDonald

A Power-User's Guide to Java

Gives you an overview of key aspects of the Java language and references on the core library, commonly used tools, and Java 8 features.

Cay Horstmann

The De Facto Standard for Version Control

Today, Git is effectively the de-facto standard for software version control, and it is truly an expected tool in every developer’s toolbox. This quick overview demonstrates what a rich and deep DVCS Git truly is, while still being approachable for the newcomer to this collaborative approach to source code and version control. Download this Refcard to learn about the essentials of getting started with Git like cloning existing projects, pushing Git commits to subversion, branching and merging, and more.

Matthew McCullough

The Representational State Transfer (REST) architectural style is a worldview that elevates information into a first-class element of architectures. REST allows us to achieve the architectural properties of performance, scalability, generality, simplicity, modifiability, and extensibility. This newly updated Refcard explains main HTTP verbs, describes response codes, and lists libraries and frameworks. It also gives additional resources to further explore each topic.

Brian Sletten

Unlocking Unobtrusive JavaScript

Introduces Ajax, a group interrelated techniques used in client-side web development for creating asynchronous web applications.

Dave Crane

The Most Popular Agile Methodology

Scrum is a framework that allows people to productively and creatively deliver products of the highest possible value. With over 70% of Agile teams using Scrum or Scrum hybrid, learn more about its benefits in managing complex product development. This newly updated Refcard explores the details of Scrum, including theory, values, roles, and events. It also includes a sample of a popular approach to deliver Integrated Increments in a scaled environment.

Dave West

Understanding the Core Concurrency Concepts

This Refcard will help Java developers working with multi-threaded programs to understand core concurrency concepts and how to apply them. Overview the key aspects of the Java language and get references on the core library.

Igor Sorokin

Dependency Injection in a Nutshell

Catalogs the XML elements available as of Spring 2.5 and highlights those most commonly used: a handy resource for Spring context configuration.

Craig Walls

First Steps in CSS

Covers Core principles of CSS that will expand and strengthen your professional ability to work with CSS. Part one of three.

Molly Holzschlag

The Core jQuery Reference

Introduces jQuery Selectors, which allow you to select and manipulate HTML elements as a group or as a single element in jQuery.

Bear Bibeault

Test and Debug Code With Java’s Leading IDE

Eclipse IDE is a cross-platform, multi-purpose, open-source Integrated Development Environment. It is widely used to develop projects in Java, JavaScript, PHP, C++, Scala, and many others. This newly updated Refcard breaks down installing, setting up, and getting started with Eclipse. It also covers productivity tips, creating new projects and files, accessing Source Control Managers, and debugging configurations.

Mickael Istria

Understanding Selectors

Covers Core principles of CSS that will expand and strengthen your professional ability to work with CSS. Part two of three.

Molly Holzschlag

Hosted by

Application Security News, Tutorials & Tools

Security Spotlight

Everything You Need to Know About Web Pentesting: A Complete Guide
by Varsha Paul

Threat Detection for Containers

Apache Kafka in Crypto and Finserv for Cybersecurity and Fraud Detection

Securing Container Base Images Using Kyverno Policies

The 2-Minute Test for Kubernetes Pod Security
by Jim Bugwadia CORE

Continuous Delivery Pipeline Security Essentials

Auth0 (Okta) vs. Cognito

Cloud Security Audit Tools: A Glance, Why It's Important, Top Tools and Techniques