Your Tools See Repositories. Attackers See an Estate. Back in February I was at the DevSecOps Leadership Forum in London to talk about proactive risk reduction using graph analysis. Before my slot, a question from the floor, aimed at one of the other presenters, set the tone for the whole…
Untangling the Confusion People often confuse these two...
The Plan, the Order, and the Bill In...
Quantum, AI, and the Window That’s Already Closing...
Last week, Anthropic announced Claude Mythos Preview and...
Bear with me on this train of thought....
Cutting the Dead Wood from Your Dependency Graph...
Mitigating Third-Party Component Risk: Swapping the Cancer for...
How One Bad Library Can Poison Your Entire...
I’ve been talking about graphs for dependency analysis...
SAST vs Claude Code Security: A Deep Dive...
Why SAST is broken, and how it could...
Cursor as your Secure Dev Team What I...
Building an AppSec Program: A Collaborative Approach Are...
AI-Generated Code: Productivity Gains, Security Pains, and the...
There are lots of ways we can optimise what we do, through a data driven approach, but we need to be careful and use critical and creative thinking.
Why are so many people just diving, straight into the code? A minimum of requirements and design? Perhaps a threat Model?
