Security 15 min read
The AI Slop Discourse Is Missing the Point: Your "Authoritative" Security Guidance Might Be Worse
Why I'd rather trust Claude with my Go security code than a 5,000-star OWASP project
MC
Mark Curphey
Blog
Blog
Engineering insights, product updates, and perspectives on developer security tooling.
Featured
Engineering 8 min
Easily track Linux binary provenance with Chalk
This article explains how to track the changes that happen to a Linux binary using Chalk
MS
Miroslav Shubernetskiy
Apr 28, 2026
Security 14 min
Care Less, Protect More: Why Security Tools Can't Save Us From Open Source Vulnerabilities
MC
Mark Curphey
Oct 2, 2025
Latest
Security 9 min
Get Ahead of Secrets Leaks: A Step-by-Step Guide to Configuring Ocular for Automated GitHub Scanning with Trufflehog
BT
Bryce Thuilot
Aug 7, 2025
Engineering 6 min
Code Sprawl is the Sleeper Cell of Vibe Coding
What is going to happen when the whole world becomes developers creating code? Spoiler alert: Some problems today are going to get exponentially worse.
MC
Mark Curphey
Jul 31, 2025
Security 4 min
When "You Could Be Hacked" Is the Best We've Got
Most GenAI security lists miss the mark. Here’s what developers actually need to build secure software with real tools and context.
MC
Mark Curphey
Jul 24, 2025
Security 4 min
Out-of-Band, In Control: Why We Built Ocular
Ocular is a flexible, open-source platform for scalable security scanning beyond your CI/CD system.
BT
Bryce Thuilot
Jul 17, 2025
Product 11 min
Builds Don’t Lie. Unless You’re Not Watching Them.
AI is driving a software surge. Learn how Crash Override delivers real-time code-to-cloud visibility to tame complexity and risk.
JV
John Viega
Jul 15, 2025
Engineering 6 min
Seeing What Matters Starts with Shadow Engineering Detection
Shadow engineering is the new shadow IT. Learn how Crash Override helps you uncover it early, align Dev and Sec, and build faster with less risk and more control.
MC
Mark Curphey
Jun 17, 2025
Engineering 7 min
Hooray! Security Teams May Still Be Accountable for Secure Software, but Developers Are Now Taking Responsibility for It and Here Is Why
MC
Mark Curphey
Jun 3, 2025
Cyber Industry 5 min
RSA 2025: Lost in the Petting Zoo, Searching for Signal
MC
Mark Curphey
May 7, 2025
Security 4 min
How to Uncover Potential Shadow Engineering Situations
SC
Sean Clarke
Apr 30, 2025
Newsletter
Stay in the loop.
Developer security insights. No spam, unsubscribe anytime.
Read our Privacy Policy.