Security

The AI Slop Discourse Is Missing the Point: Your "Authoritative" Security Guidance Might Be Worse

Why I'd rather trust Claude with my Go security code than a 5,000-star OWASP project

How to Stop Writing Sh*t Prompts Like I Used To

Care Less, Protect More: Why Security Tools Can't Save Us From Open Source Vulnerabilities

Get Ahead of Secrets Leaks: A Step-by-Step Guide to Configuring Ocular for Automated GitHub Scanning with Trufflehog

When "You Could Be Hacked" Is the Best We've Got

Most GenAI security lists miss the mark. Here’s what developers actually need to build secure software with real tools and context.

Out-of-Band, In Control: Why We Built Ocular

Ocular is a flexible, open-source platform for scalable security scanning beyond your CI/CD system.

How to Uncover Potential Shadow Engineering Situations

Code Ownership and Code Owners Files

Opengrep - The Security Industry Deserves Better

Are there too many bubbles of similar security efforts?

SBOMs for Production Incident Response Maybe a Killer Trojan Use Case for Security

Build System or Bust and Wrapping Security Tools Using Docker

Security Quackery

The curse of AI in the security industry

Five Questionable Things About Top Ten Security Lists

Building Security Tools is the Wrong Approach

We Need Modern Product Security Certification And We Need It Now

Why you should not give a f*ck about security awards

Is developer led, the best strategy for the adoption of security tools?

Security Tools Can't Just Be Friction Free. Was SCA the Tipping Point?

Developers Only Pay Lip Service to Security. Get Over It.

Could sports advertising be a valid model for for open-source security?

Why security companies and communities come and go

Why supply chain security is so much more than open source code and CVE’s

CVE / NVD doesn’t work for open source and supply chain security

CVE / NVD doesn’t work for open source and supply chain security

A Security Tools Crash Is Coming

What I Learned About Information Security From Academia

Why SCA for Security is Really Hard

The CSO Interviews - the biggest unsolved problems in security today