Skip to content

AppSec Observer

Contrast's application security blog provides the latest trends and tips in DevSecOps through instrumentation and security observability.

Subscribe Now
    Topics
    We've Been Hacked. Our Data Was Breached. What Do I Do Now?

    We've Been Hacked. Our Data Was Breached. What Do I Do Now?

    We're Sorry You Got Hacked. First, if you just detected a data breach, you've been hacked, and you should probably stop..

    Why It's Time for Terms Like

    Why It's Time for Terms Like "Static" and "Dynamic" Analysis to Die

    In John Godfrey Saxe's retelling of The Blind Men and the Elephant, six blind men try to teach each other what an..

    The Ankle Biters of the Application Security World

    The Ankle Biters of the Application Security World

    The playing field isn't exactly level, and ankle biters (aka script kiddies and hackers) know it. While businesses and..

    Why Static Application Security Scanners Just Can't Cut It Anymore

    Why Static Application Security Scanners Just Can't Cut It Anymore

    Static Analysis and Dynamic Analysis Tools Have Their Place To be clear: I’ve been an advocate of both dynamic..

    Which Application Security Vulnerabilities Do I Fix First?

    Which Application Security Vulnerabilities Do I Fix First?

    Not every vulnerability is a critical one. Let's face it: Not all vulnerabilities are created equal. Not every..

    The 6 Pillars of Application Security

    The 6 Pillars of Application Security

    Once you discover a vulnerability, it instantly is super-critical information. How do you protect security..

    Is Your AppSec Tool Truly Scalable?

    Is Your AppSec Tool Truly Scalable?

    Many businesses are trapped in a dilemma, a Morten's Fork – should we rely on automated tools to assure the application..

    The OWASP Top Ten and Beyond

    The OWASP Top Ten and Beyond

    The past decade shows only trivial progress in improving web app security, according to new vulnerability guidelines in..

    Application Security: Faster, Cleaner, Smarter.

    Application Security: Faster, Cleaner, Smarter.

    Our release notes are all always available, but I wanted to highlight the progress we've made since the end of last..