Security Resources

Open Source Security Series

Cloud Security Series

10 tips for keeping your Docker containers safe from Log4Shell

Snyk and Bitbucket best practices cheat sheet

Log4Shell Remediation Cheat Sheet

10 Kubernetes Security Context settings you should understand

Python Security Insights

10 best practices to build a Java container with Docker

8 security best practices for Go developers

10 best practices to containerize Node.js web applications with Docker

10 React security best practices

6 Angular security best practices

8 security code review best practices

10 Java security best practices

10 Serverless security best practices

State of Cloud Native Application Security

8 best practices to prevent SQL injection attacks

How Twilio Scaled through Dev-First Security and DevSecOps

Stranger Danger Live Hacking Session: March

Integrating Security Automation in Modern Application Development Environments

Docker Workshop: Breaking Containers to Improve Security

Best Practices for Securing Modern Cloud Native Applications

How Shutterstock Implemented DevSecOps from the Ground Up

Stranger Danger Live Hacking Session: January

Fast or Secure? You Can Only Pick Two

Snyk Code: An Introduction to Dev-First SAST

The DevSecOps Journey

Building Container Security into your SDLC

ESG CyberArk Modern App Dev Security

Adding Container Security to Docker Hub from Snyk

Securing Your Infrastructure Before, During and After Deployment

What's in Your FinServ Software?

Day in the Life of a DevSecOps Professional

Prioritise your mis configured Kubernetes issues

Hack my Kubernetes configuration

'Snyk-In': Product Walkthrough

The 2021 IaC Report: Infrastructure as Code Security Insights

Gartner DevSecOps Report

Cheatsheet: Top 10 Application Security Acronyms

Hacking the Security Footprint of Open Source Dependencies

2020 Gartner Market Guide for Software Composition Analysis

ESG Research: Modern Application Development Security

The State of Open Source Security Report 2020

Selecting Your Open Source Security Platform: Why Asurion Chose Snyk

Do You Trust Your DevSecOps Pipeline?

The Paved Road to Container & Kubernetes Security

Integrate Security Early and Often for Successful DevSecOps

O'Reilly Book: Securing Open Source Libraries

JVM Ecosystem Report 2020

Maintaining Secure Development Practices in a WFH Environment

Building Your Kubernetes AppSec Strategy

DevSecOps Insights 2020

Secure Development During Digital Transformation

Using Snyk to Secure Your Kubernetes Configurations

Using Snyk to successfully roll out developer-first License Compliance

Forrester Webinar - ROI of Open Source Security

O'Reilly Securing Open Source Libraries - Ask Me Anything Webinar

Secure development when working from home — tips and tricks

Webinar Ask Me Anything Advancing DevSecOps in 2020

Webinar Demystifying DevSecOps - Trace3

Webinar DevSecOps Paving the Way for End-to-end Security

PCI Deep Dive Webinar

Securing Your Bitbucket in 30 minutes!

O'Reilly Book Serverless Security

The Total Economic Impact™ Of Snyk

DevSecOps Insights

Securing Containers By Breaking In

Shifting Docker Security Left

Directory traversal vulnerability exploit in the st package

Regular expression denial of service vulnerability exploit in the ms package

Snyk CLI cheat sheet

10 npm Security Best Practices

Python Security Best Practices Cheat Sheet

10 Docker Image Security Best Practices

The state of open source security - 2019

Zip Slip Vulnerability Cheat Sheet

Local Type Inference Cheat Sheet for Java 10 and beyond

10 Maven Security Best Practices

10 Spring Boot Security Best Practices

10 GitHub Security Best Practices