Feb 8 · 4 min read · The Problem: Bad Code Slipping Through You're in the zone, making changes, and you commit. Then you push. Then CI fails. Or worse—someone reviews your PR and points out formatting issues, linting errors, or security vulnerabilities that you could've ...
Join discussion
Sep 15, 2025 · 10 min read · Security is often treated as a late stage gate. In a cloud native world, that's a tax on velocity. Shift Left Security flips the script. We integrate security earlier. During design, coding, and CI—so developers get fast, actionable feedback without ...
Join discussion
Jun 21, 2025 · 18 min read · Introduction This is the first article in a 30-day series on Static Application Security Testing (SAST). We’ll introduce what SAST is and why it matters for building secure software. SAST refers to analyzing source code to find security vulnerabiliti...
Join discussion
May 29, 2025 · 2 min read · Shift Left Testing is a software testing approach that involves starting testing activities early in the development lifecycle. It aims to detect defects as soon as possible to reduce cost and time of fixing issues later. This approach promotes colla...
Join discussion
Mar 19, 2025 · 6 min read · Unequal Urgency Through my time working in cybersecurity, I've consistently observed a notable gap in how quickly vulnerabilities are addressed. Application security flaws are usually patched with higher urgency, yet cloud infrastructure issues often...
Join discussionOct 25, 2024 · 3 min read · In today's software development landscape, open-source components have become an integral part of building applications. While open-source libraries and frameworks offer numerous benefits, they also introduce new security risks. Software Composition ...
Join discussionOct 14, 2024 · 10 min read · Introduction Dans un monde où la nuisance à la sécurité de l’information évolue à un rythme effréné, la sécurité applicative devient pour moi une priorité incontournable pour les entreprises souhaitant protéger leurs données et leurs systèmes d’infor...
Join discussionJul 24, 2024 · 7 min read · In my previous article, Managing Architectural Tech Debt, I talked about understanding and managing architectural technical debt. Architectural technical debt is the often ignored, but ironically one of the most damaging, categories of technical debt...
Join discussion
Jul 13, 2024 · 6 min read · I feel like there’s always been a love-hate relationship with the concept of testing. Without a doubt, the benefits of testing whatever you are building help avoid customers reporting those same discoveries. That’s the love part of the relationship. ...
Join discussion
Jun 3, 2024 · 6 min read · When I think about technical debt, I still remember the first application I created that made me realize the consequences of an unsuitable architecture. It happened back in the late 1990s, when I was first getting started as a consultant. The client ...
Join discussion