https://kerrsecure.com/https://kerrsecure.com/2022/08/28/4-ways-to-engage-developers-who-couldnt-care-less-about-security/https://kerrsecure.com/2022/08/28/devops-security-culture-12-fails-your-team-can-learn-from/https://kerrsecure.com/2022/08/28/how-to-do-application-security-on-a-budget/https://kerrsecure.com/2022/08/28/how-to-hack-your-security-culture/https://kerrsecure.com/2022/08/28/how-to-put-the-threat-modeling-manifesto-into-action/https://kerrsecure.com/2022/08/28/the-day-i-met-john-chambers-and-quit/https://kerrsecure.com/2022/08/28/the-state-of-devsecops-5-best-practices-from-the-front-lines/https://kerrsecure.com/2022/08/28/what-i-learned-in-year-3-of-my-security-journey/https://kerrsecure.com/2022/08/28/what-i-learned-in-year-5-of-my-security-journey/https://kerrsecure.com/2022/08/28/what-i-learned-in-year-four-of-my-security-journey/https://kerrsecure.com/2022/08/28/what-i-learned-in-year-one-of-my-security-journey/https://kerrsecure.com/2022/08/28/what-i-learned-in-year-two-of-my-security-journey/https://kerrsecure.com/2022/08/28/why-cybersecurity-pros-need-to-learn-how-to-code/https://kerrsecure.com/2022/08/28/why-developers-dislike-security-and-what-you-can-do-about-it/https://kerrsecure.com/2022/08/28/why-marketing-security-to-your-org-matters-and-how-to-do-it-right/https://kerrsecure.com/2022/08/29/4-steps-to-transforming-developers-into-security-people/https://kerrsecure.com/2022/08/29/6-application-security-lessons-every-team-should-study/https://kerrsecure.com/2022/08/29/6-ways-to-develop-a-security-culture-from-top-to-bottom/https://kerrsecure.com/2022/08/29/a-developers-guide-to-attacker-motivation-in-the-supply-chain/https://kerrsecure.com/2022/08/29/a-primer-on-secure-devops-why-devsecops-matters/https://kerrsecure.com/2022/08/29/a-security-practitioners-guide-to-software-obsolescence/https://kerrsecure.com/2022/08/29/how-developers-can-take-the-lead-on-security/https://kerrsecure.com/2022/08/29/how-to-put-the-s-for-security-into-your-iot-development/https://kerrsecure.com/2022/08/29/information-security-needs-community-6-ways-to-build-up-your-teams/https://kerrsecure.com/2022/08/29/owasp-api-security-top-10-get-your-dev-team-up-to-speed/https://kerrsecure.com/2022/08/29/owasp-top-10-2021-7-action-items-for-app-sec-teams/https://kerrsecure.com/2022/08/29/secure-development-lifecycle-the-essential-guide-to-safe-software-pipelines/https://kerrsecure.com/2022/08/29/the-3-most-crucial-security-behaviors-in-devsecops/https://kerrsecure.com/2022/08/29/why-owasps-threat-dragon-will-change-the-game-on-threat-modeling/https://kerrsecure.com/2022/09/06/appsec-we-have-a-problem-not-everyone-knows-how-to-code/https://kerrsecure.com/2022/09/24/the-hybrid-approach-to-threat-modeling/https://kerrsecure.com/2022/10/29/threat-modeling-and-a-lack-of-tools/https://kerrsecure.com/2022/11/05/the-best-threat-modeling-representation/https://kerrsecure.com/2022/11/10/owasp-proactive-controls-the-answer-to-the-owasp-top-ten/https://kerrsecure.com/2022/11/19/thirty-one-random-appsec-thoughts/https://kerrsecure.com/2022/12/31/saying-goodbye-to-security-journey/https://kerrsecure.com/2023/01/01/the-security-champion-framework/https://kerrsecure.com/2023/01/08/looking-back-and-forward-on-a-twenty-five-year-career-in-cyber-security/https://kerrsecure.com/2023/01/21/security-utility-or-what-we-all-really-want/https://kerrsecure.com/2023/02/07/how-to-get-started-in-cybersecurity/https://kerrsecure.com/2023/05/21/does-anyone-need-dast/https://kerrsecure.com/2023/07/05/doing-appsec-wrong-%F0%9F%A4%A6%E2%99%82%EF%B8%8F/https://kerrsecure.com/2023/07/05/simple-software-security-do-we-ask-too-much-of-developers/https://kerrsecure.com/2023/07/28/guard-rails-and-paved-roads-%F0%9F%9B%A3%EF%B8%8F-2/https://kerrsecure.com/2023/08/04/the-api-is-the-heart-of-the-modern-web-2/https://kerrsecure.com/about/https://kerrsecure.com/contact/https://kerrsecure.com/education/https://kerrsecure.com/essays/https://kerrsecure.com/podcasts/https://kerrsecure.com/portfolio/https://kerrsecure.com/privacy/https://kerrsecure.com/services/