Insights from experts shaping secure development
Access expert content on secure coding, AI governance, and software risk management.

secIT - Hannover 2024
Schedule time to meet or stop by Booth 14 during secIT!
Product talk: Roadmap and vision
Dive into the dynamic world of agile and developer-centric secure code learning with our exclusive Product Talk webinar!

Hands on Application Security Workshop
In partnership with AWS, Contrast Security, and Artiq, we bring you a interactive hands-on AppSec workshop

Virtual Wine Tasting - Ohio
Join us, GuidePoint, and other partners for a Virtual Wine Tasting with Silver Oaks Winery.

DevSecOps 360 - Dubai
In partnership with IBM, Synopsys, and IriusRisk, we’ll share our latest integration vision for DevSecOps within the partner ecosystem

DevSecOps 360 - Riyadh
In partnership with IBM, Synopsys, and IriusRisk, we’ll share our latest integration vision for DevSecOps within the partner ecosystem

DevSecOps 360 - Munich
In partnership with IBM, Synopsys, and IriusRisk, we’ll share our latest integration vision for DevSecOps within the partner ecosystem
Going beyond compliance
How Netskope built a world-class developer security program through developer engagement with Secure Code Warrior agile platform
The path to security champions
How Workday utilized agile secure learning to upskill developers.
One culture of security: Build up your security champions with agile secure code learning
One culture of security: Build up your security champions with agile secure code learning
People, process, and technology
Join us in conversation with Vis Chirravuri to learn first-hand how he has developed people, process, and technology approaches for his secure code learning program
Security maturity in development teams: what, and how?
In this webinar, Scott Shapiro, SCW’s Director of Product Marketing, will discuss the different stages of security maturity in developer teams and the pitfalls to avoid when working to improve security maturity, and shift security left.
Webinar: The OWASP Top 10… and beyond
The OWASP Top 10 2021 reflects a significant overhaul, with brand new categories making their debut and injection attacks falling from the #1 spot for the first time. Watch the Webinar to find out more.
How is the SBOM important to prepare for the Cyber Resilience Act?
The ROI of developer-driven security
Everyone wants a good return on their investment when it comes to investing in their techstack or additional training programs, but when it comes to security, one needs to be playing a long game that goes beyond calculating simple ROI. Learn how investment in developer-driven security will not only save on the expense of expensive breaches, the loss of productivity, and accumulated tech--debt, but create a proactive and cost-effective strategy to stay ahead of today’s threat landscape.

Rethinking developer education to supercharge security
Security leaders need to rethink the value developers are getting from the secure code learning experience, and how to make the program more engaging and, most importantly, more impactful. In this blog, we’ll explore how to get developers excited about the secure code education through more hands-on learning and integrations with their tools to drive a big results and reduce vulnerabilities introduced up to 53%.

Reduce vulnerabilities by half with agile learning
Learn how you can reduce vulnerabilities and security breaches with Secure Code Warrior’s hands-on agile security training.
.avif)
Deep-Dive: Finding and fixing high-severity libcurl/curl vulnerabilities
Affected versions of the curl library are susceptible to a Heap-based buffer overflow vulnerability, related to a legacy issue with the SOCKS5 proxy protocol. Learn how to find and fix this vulnerability type with a playable mission.

Kamer van Koophandel Sets the Standard for Developer-Driven Security at Scale
Kamer van Koophandel shares how it embedded secure coding into everyday development through role-based certifications, Trust Score benchmarking, and a culture of shared security ownership.
Going for Gold: Soaring Secure Code Standards at Paysafe
See how Paysafe's partnership with Secure Code Warrior led to a 45% boost in developer productivity and a major reduction in code vulnerabilities.

Devlympics 2023: In Review
Explore the Devlympics 2023 results in this report. Dive into developer engagement, tech stack and languages trends in each industry that participated, and key vulnerabilities and CWEs covered in the annual global event hosted by Secure Code Warrior.

SD Times: AI-Assisted Development Multiplies Human Error: What’s Your AI Governance and Risk Management Strategy?
According to a recent report from Gartner, the rampant use of shadow AI and rogue automation is further fueling the proliferation of AI vulnerabilities. Gartner notes that 32% of IT workers using generative AI tools at work say they keep them hidden from cybersecurity teams. Combined with low-code/no-code platforms and vibe coding practices, the AI copilots are greatly expanding the enterprise attack surface.

Cybersecurity Tribe: What Separates Real AI Governance From Policy Theater
For this article, we asked a central question for security and risk leaders: "What differentiates a policy that genuinely mitigates enterprise risk from one that exists primarily to demonstrate that the organization has acknowledged AI risk?"
Secure Code Warrior Learning: Enable Secure AI-Driven Development at Scale
Trust Agent:AI - Secure and scale AI-Drive development
AI is writing code. Who’s governing it? With up to 50% of AI-generated code containing security weaknesses, managing AI risk is critical. Discover how SCW's Trust Agent: AI provides the real-time visibility, proactive governance, and targeted upskilling needed to scale AI-driven development securely.

The Power of OpenText Application Security + Secure Code Warrior
OpenText Application Security and Secure Code Warrior combine vulnerability detection with AI Software Governance and developer capability. Together, they help organizations reduce risk, strengthen secure coding practices, and confidently adopt AI-driven development.





