AppSec Blog

Keep up with the latest news on cybersecurity, technical trends, and programming best practices.

Category: Software Testing

Recent Posts

What Is Defect Density? How to Measure and Improve Code Quality

Software engineering professionals are always looking for ways to write better code, and a critical component of continuous improvement is regularly tracking and assessing metrics. Defect density is a metric to measure the number of confirmed defects in...

DevSecOps Software Testing

Vulnerability Scanning vs Penetration Testing: Key Differences

There are two critical processes that help ensure your applications are well-protected from malicious actors: Vulnerability scanning and penetration testing. While both concepts aim to secure a particular aspect of the network or your application, they serve ...

Vulnerability Scanning vs Penetration Testing blog image redo

How to Maintain Software Supply Chain Security

Software supply chain security has never been more important. As dev teams increasingly rely on third-party components, open-source libraries, and external vendors, attackers evolve their methods to exploit weaknesses in the software supply chain. Techniques ...

DevSecOps Kiuwan Software Testing

How to maintain software supply chain security blog image

What Is DevOps Security? (And What Tools To Use)

Software developers know that security is no longer just an afterthought but a fundamental aspect of the DevOps process. As businesses increasingly adopt DevOps practices to enhance agility and speed delivery, the need to integrate robust security measures ha...

DevSecOps Kiuwan Software Testing

What Is DevOps Security? (And What Tools To Use)

Navigating the OWASP Code Review Guide

Navigate the OWASP Code Review Guide to enhance your development process with structured methodologies, secure coding practices, and effective code review techniques.

Software Testing Programming Language

Why source code quality matters blog graphic

What Is SCA? (Software Composition Analysis)

If you want to know what SCA is and how it can help with your development, we’ve created a guide to scanning your application.

Software Testing DevSecOps Kiuwan

17 Secure Coding Guidelines and Best Practices

One of the most important parts of software development is ensuring that your code is protected as much as possible from a wide range of threats. The number of cybersecurity breaches is going up, which is spurring many companies to raise their cybersecurity b...

Trends DevSecOps Programming Language Software Testing

What Is Vulnerability Remediation and Why Is It Essential to the SDLC?

As our use of technology grows and evolves, so do the threats presented by bad actors constantly looking for ways to exploit software vulnerabilities. Mitigating these risks during the software development lifecycle (SDLC) has become critical in helping devel...

DevSecOps Risk Management Software Testing

Your Guide to Static Testing vs. Dynamic Testing

As developers continuously push for quicker release cycles without compromising on quality, using effective testing strategies and tools is key to improving quality and efficiency. Code analysis is one of the most effective forms of testing, as it helps find ...

DevSecOps Software Testing

Static testing vs dynamic testing graphic

How to Choose the Best SAST Tools

The scope and number of cyber threats facing developers are growing daily. Companies must adopt robust security measures to safeguard their sensitive data and mitigate the risk of breaches. Static application security testing (SAST) tools empower develop...

DevSecOps Kiuwan Risk Management Software Testing

How to Choose Code Scanning Tools

For as fast as the software development process can go, it’s all too easy for application security to become an afterthought. However, the right code scanning tools can make app hardening an organic part of the development lifecycle and protect your team’s ti...

DevSecOps Risk Management Software Testing