Application Security

10 Ways Eureka DevSecOps Platform Delivers Value

Eureka DevSecOps Platform can help you get the most value from your tools, better identify real security issues, and reduce your business risk. Here are 10 ways Eureka DevSecOps Platform…

Orchestrating & Correlating Your Security Scanners

If you’re using multiple automated security tools such as SAST, DAST, and SCA, and not correlating the results, then you could be missing some critical vulnerabilities that put your business…

Navigating IoT Innovations and Their Impact on Canadian Businesses 

The following is an excerpt from an interview from our Founder & CSO, Farshad Abasi and the Canadian Chamber of Commerce. Click here to read the full interview. As the…

Penetration Testing: How Often Should You Test?

How often should I do penetration testing? It’s a question that comes up regularly. The short answer is: it depends. The frequency of pentesting depends on the organization’s specific needs…

The Importance of a Risk Based Approach in Security Assessments

Suppose you run a security scan on your application, and it produces a report with a list of one hundred security issues. Where would you start? What issue(s) would you…

Case Study: Eureka DevSecOps Platform

The Background Our client in the data analytics sector had implemented DevOps automation and CI/CD pipelines but without any security in the mix. This is quite common as some organizations…

What is Pentesting? (and What to Look for When Choosing a Service Provider)

You’ve probably heard of the term pentesting and wondered what it means. You’ve probably even had a pentest done and was not quite sure what it was. In this post,…

Does Your Application Need Security Requirements?

How do I make my application more secure? Where do I get security requirements from? Why do I need security requirements? If you have an application, these are some of…

What is Threat Modeling? (and Why is it Important for Applications?)

What is threat modeling and why is it important? A threat is something that has a negative impact on an asset. In the context of information security, particularly about application…

Dev Teams Don’t Need Fulltime AppSec Members, They Need Security Champions

In this post, we’ll explore whether you need dedicated application security team members in your development team and what the concept of security champions is all about. Where are all…