Armored Code

In 2006 I started a project called OWASP Orizon because I wanted something that could help me review other people’s source code for security issues.

There is a recurring question every time a new wave of AI tooling appears: will AI replace software engineers?

For nearly two decades, NGINX has been one of the silent pillars of the modern Internet.

Security tools are easy to run.

Introduction Modern application security is no longer about running a single scanner.

Introduction Turning security tool outputs into actionable insights is one of the biggest challenges for developers and security engineers.

In the previous post, we saw how many security tools can “lie”: they don’t tell the full story, generate noise, and often leave teams with a false sense of security.

We live in a world where developers and security teams are drowning in alerts.

During my OSCE exam preparation I had to deal with shellcode writing experience where very few allower characters were available.

In order to monitor dawnscanner security scaner usage, I introduced in upcoming version 2.0.0, a telemetry system.