Background Engineers are constantly striving to be more efficient, using tooling, as the joke goes, to automate themselves out of a job. Technology improves lives through automation, whether through daily efficiency improvements to cars or the quest for better search results via Google rather than Ask Jeeves. This drive for efficiency is not new. Before…
Hey! It’s been awhile since the last AppSec Travels blog. In this post we wanted to write about a vulnerability that is near and dear to our hearts: User Enumeration. In the world of application security, some vulnerabilities are loud and catastrophic, while others are subtle, acting as silent facilitators for more significant attacks. User…
The 2025 OWASP Top 10 is here, and it might be my gray hair speaking, but it seems everything old is new again. For old hats–like myself, who relied on the initial 2003 list to guide my early penetration testing career (thank you, Classic ASP, for the good times)–the 2025 list has less shocking revelations…
Code security by coders. Manual-led application security assessments, secure-code review, and developer-friendly tooling.