%252520(1).png)
Insights from experts shaping secure development
Access expert content on secure coding, AI governance, and software risk management.
The ROI of developer-driven security
Everyone wants a good return on their investment when it comes to investing in their techstack or additional training programs, but when it comes to security, one needs to be playing a long game that goes beyond calculating simple ROI. Learn how investment in developer-driven security will not only save on the expense of expensive breaches, the loss of productivity, and accumulated tech--debt, but create a proactive and cost-effective strategy to stay ahead of today’s threat landscape.
The path to security champions
How Workday utilized agile secure learning to upskill developers.
People, process, and technology
Join us in conversation with Vis Chirravuri to learn first-hand how he has developed people, process, and technology approaches for his secure code learning program
Security maturity in development teams: what, and how?
In this webinar, Scott Shapiro, SCW’s Director of Product Marketing, will discuss the different stages of security maturity in developer teams and the pitfalls to avoid when working to improve security maturity, and shift security left.
Seven years of Secure Code Warrior, and it’s starting to feel real
Our birthday milestones are a wonderful reminder to reflect on the fruits of our labor, celebrate the team, and tackle the year ahead with confidence. And now, seven years since inception, I’m left wondering: Have we done it? Is this a real company yet? Of course, we have reached maturity, but I sure hope we never lose the sense of curiosity, passion, and geekiness we’ve had since the beginning.
Why scaffolded learning builds security-strong developers
As an industry, we should never expect developers to become security experts, but organizations can adopt new standards for developer enablement so they can produce higher quality software.
The Log4j vulnerability explained - Its attack vector and how to prevent it
In December 2021, a critical security vulnerability Log4Shell was disclosed in the Java library Log4j. In this article, we breakdown the Log4Shell vulnerability into the simplest form for you to grasp the basic and introduce you to a mission - a playground where you can try exploiting a simulated website using the knowledge of this vulnerability.
Kamer van Koophandel: Developer-Driven Security at Scale
Kamer van Koophandel shares how it embedded secure coding into everyday development through role-based certifications, Trust Score benchmarking, and a culture of shared security ownership.
Going for Gold: Soaring Secure Code Standards at Paysafe
See how Paysafe's partnership with Secure Code Warrior led to a 45% boost in developer productivity and a major reduction in code vulnerabilities.
Devlympics 2023: In Review
Explore the Devlympics 2023 results in this report. Dive into developer engagement, tech stack and languages trends in each industry that participated, and key vulnerabilities and CWEs covered in the annual global event hosted by Secure Code Warrior.
ITWire: Agentic AI Era Demands Overhaul of Governance Frameworks
The emergence of agentic AI marks a structural shift in software development, introducing systems that not only accelerate production cycles but also perform autonomous reasoning and action beyond direct human control.
SecurityWeek: How to Conduct a Successful Audit of AI-Driven Software Development
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
IT Brief: A strategic blueprint for governing AI-enabled software development
According to a recent survey, more than seven in ten developers who have used AI coding tools report relying on them on a daily basis. However, many organisations still lack clear visibility into how these tools are influencing production code, creating governance gaps at a time when demand is accelerating and delivery timelines are tightening.
Citizen AI by Secure Code Warrior
AI risk doesn't stop at engineering. Get the one-pager on Citizen AI — build AI literacy and safe habits across your whole workforce.
Understand how AI is transforming software development—and how security must evolve with it.
From AI autocomplete to autonomous agents—explore how software development is evolving and what it means for security, governance, and your team.