You would think that there is not a single developer [...]

Every application security and SecOps organization needs to connect people under the banner of [...]

When people think about application security in a large organization, [...]

When you build a skyscraper, how important is the foundation? [...]

Developers are everywhere because software is everywhere. Try to think [...]

Of course, every organization has a security culture. If they say they don’t, they are either lying or afraid to admit they have a bad security culture. The good news is that any security culture can positively change how the organization approaches security. But culture change takes time, so don’t expect your members of your organization to overnight become pen-testing Ninjas that write secure code while they sleep. With the right process and attitude, you’ll get there.