Advice from a Pentester to a CISO

The straight-forward-highly-opinionated security advice center.

What a pentester really wants to tell a CISO!

News

Feb 11, 2019 by Sherif Koussa

Watch Out for Hidden Costs of Security Tools for Developers

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

DevSecOps

Jan 25, 2019 by Sherif Koussa

3 Things to Watch Out For While Integrating Security into DevOps

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Penetration Testing

Jan 15, 2019 by Sherif Koussa

7 Most Popular Free Vulnerability Scanner Tools [Free & Paid]

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Penetration Testing

Jan 11, 2019 by Sherif Koussa

3 Considerations Before Switching Pentest Providers

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Penetration Testing Secure Application Design

Dec 5, 2018 by Sherif Koussa

Secure Code Review Checklist [Downloadable]

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

DevSecOps

Nov 2, 2018 by Sherif Koussa

What do SAST, DAST, IAST and RASP Mean to Developers?

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Secure Application Design

Nov 2, 2018 by Sherif Koussa

Comparing the Top 3 Federated Indentity Providers: OpenID, OAuth, SAML

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Secure Application Design

Oct 26, 2018 by Sherif Koussa

Embedded Credentials in Source Code

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Types of Vulnerabilities

Oct 19, 2018 by Sherif Koussa

ImageMagick RCE Take 2

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

No items found

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

Join 4000+ followers for the latest on managing application security in emerging technologies.

Advice from a Pentester to a CISO

Office

Start A Conversation