How we handle shared dependencies across our SpringBoot/Kotlin/Gradle projects, allowing us to scale services and team members. […]

In my over twenty years in information security, I’ve experimented with my approach to AppSec a couple ways. I’ve bought REALLY expensive AppSec tools, I’ve hired LOTS of AppSec pros, and I’ve sent MANY developers to AppSec training. […]

When you check in a new web app vulnerability, do you get an alert and guidance on how to fix it? With the new StackHawk CircleCI Orb you can, and it’s easy. […]

Shifting security left means leveraging automation and integrations earlier in development. With the new StackHawk Slack App, you can get that development feedback sooner. […]

This is my favorite slide from my pitch deck, used to highlight the problem that has kept security from “shifting left” into the modern development workflow. We started StackHawk to help engineers find and fix application security bugs in their code, as they write software and before deploying to production. […]

When we first introduced StackHawk to some of our close friends in the security industry and asked them to try it out, they tested it the same way we did. They ran HawkScan through its paces with one of the many vulnerable web applications security professionals set up online to help the community learn. They did this to have a semi-known outcome to see how StackHawk works. Enter Damn Vulnerable Web App. […]