Who We Are
We aim to help solve the problem of security vulnerabilities in code through education. Despite years of research and work on stopping bugs, such as SQL Injection or Cross-Site Scripting, they still appear in production code worldwide. It doesn't matter if you are a small start-up or a large global organisation.
Specialists are expensive
Initially, we would try to fix security issues by hiring pentesters or security specialists to review applications/code and find vulnerabilities. However, security specialists are hard to find and often expensive. (Plus all these newfound vulnerabilities immediately go straight to the backlog.) Your release timeline is then at the mercy of the productivity of your security professionals. If they are oversubscribed, do you hold off releasing or do you risk releasing code that might be vulnerable?
Tools aren't always the solution
Today more and more companies use static analysis tools to find bugs before they reach production. Static analysis tools are a great way to catch the most common issues. However, they are expensive, prone to false positives and don't identify everything.
Developers are the key
The earlier you identify and fix a vulnerability in your code; the quicker and cheaper it is to fix. Therefore you want to create a development environment where people can spot and fix bugs as quickly as possible. The best way to do this is education. Enable your developers to identify and fix bugs (that analysis tools could never detect) before the code ever enters production. We provide the necessary tools to teach the basics of secure coding, what to do, what practices to avoid and what issues to look out for.
