Pinned Tweet
SecureFlag is the only 💯 Hands-On Secure Coding Training platform for Developers, DevOps & QA engineers.
Learn how to identify and remediate real security issues using familiar tools and technologies in an authentic development environment 📲bit.ly/3LXkMil
Learn how to identify and remediate real security issues using familiar tools and technologies in an authentic development environment 📲bit.ly/3LXkMil
0
4
5
1,396
Not everyone who builds with AI needs the same security training 📋
Matching training to the work each person does makes a program more effective.
See how to plan AI security training in Part 1 of our new series: blog.secureflag.com/2026/11/06/ove…
#AISecurity #SecureCoding
Matching training to the work each person does makes a program more effective.
See how to plan AI security training in Part 1 of our new series: blog.secureflag.com/2026/11/06/ove…
#AISecurity #SecureCoding
0
0
0
17
Our CEO Andrea Scaduto is at @owasp Global AppSec USA in San Francisco this week! 🌉 Join his workshop on threat modeling today at the conference.
🛠️ Hands-on Threat Modeling Workshop
📅 Today, Friday 6 Nov, 10:30–13:00 PST
#GlobalAppSec #ThreatModeling #AppSec
🛠️ Hands-on Threat Modeling Workshop
📅 Today, Friday 6 Nov, 10:30–13:00 PST
#GlobalAppSec #ThreatModeling #AppSec
0
0
1
42
As code volume grows, relying on security specialists is a bottleneck 🚧
Scaling AppSec means changing the model: build security into feature design & delivery, so developers make the secure call without a specialist in every sprint.
See more: secureflag.com/solutions/secu…
#AppSec
Scaling AppSec means changing the model: build security into feature design & delivery, so developers make the secure call without a specialist in every sprint.
See more: secureflag.com/solutions/secu…
#AppSec
0
0
0
11
Brilliant first day at #SecureWorld Seattle! Our own Lewis Foggie joined a panel on the double-edged sword of AI in cyber defence. 🛡️🤖
Catch the SecureFlag team at Booth 210 tomorrow, the final day. 👋
#Cybersecurity #AI
Catch the SecureFlag team at Booth 210 tomorrow, the final day. 👋
#Cybersecurity #AI
0
0
4
94
Developers struggle most with the vulnerability they’re least likely to ask for help with.
If you lead a team using AI coding tools, this report shows where your developers’ judgment, and your risk, is weakest.
📊 Read here secureflag.com/resources/pres…
#AppSec #DevSecOps #AI
If you lead a team using AI coding tools, this report shows where your developers’ judgment, and your risk, is weakest.
📊 Read here secureflag.com/resources/pres…
#AppSec #DevSecOps #AI
0
0
1
19
Train your development teams on ISO/IEC 27090 for AI security with our new course 📜
The course gives developers hands-on practice with many of the AI threats the standard describes.
Find out how ISO/IEC 27090 applies to the code developers write 👇
blog.secureflag.com/2026/11/03/iso…
The course gives developers hands-on practice with many of the AI threats the standard describes.
Find out how ISO/IEC 27090 applies to the code developers write 👇
blog.secureflag.com/2026/11/03/iso…
0
0
1
19
Is your security team still treating AI as an assistant, when it has already become an operator?
On the latest SecurePod, Nick Kelly talks to Gadi Evron, founder and CEO of Knostic and organiser of [un]prompted, about securing autonomous agents.
On the latest SecurePod, Nick Kelly talks to Gadi Evron, founder and CEO of Knostic and organiser of [un]prompted, about securing autonomous agents.
1
0
0
18
Developers struggle most with the vulnerability they’re least likely to ask for help with: Broken Access Control.
With AI writing more security fixes, that blind spot matters more than ever.
New research from SecureFlag👇secureflag.com/resources/pres…
#AppSec #AI
With AI writing more security fixes, that blind spot matters more than ever.
New research from SecureFlag👇secureflag.com/resources/pres…
#AppSec #AI
0
0
0
22
Happy Halloween from SecureFlag! The scariest part of cybersecurity? How often it's treated as the final jump scare 👻
Don't let release become a bad horror movie: catch risk early with secure coding training and threat modeling.
#CybersecurityAwarenessMonth #HappyHalloween
Don't let release become a bad horror movie: catch risk early with secure coding training and threat modeling.
#CybersecurityAwarenessMonth #HappyHalloween
0
0
1
24
Switch to your preferred language with SecureFlag’s translation feature, now supporting 32 languages 🌐
Teams can read labs and knowledge base articles in their own language.
Learn how to set a language and start training: blog.secureflag.com/2025/01/07/tra…
#AppSec #SecureCoding
Teams can read labs and knowledge base articles in their own language.
Learn how to set a language and start training: blog.secureflag.com/2025/01/07/tra…
#AppSec #SecureCoding
0
0
0
11
How do you prove security’s value when success is measured in breaches that didn’t happen? 🫥
Prevention looks invisible and finance sees it as a cost, not a control.
But you can put numbers on it: SecureFlag customers average 2.4x ROI within 12 months.
secureflag.com/solutions/prov…
Prevention looks invisible and finance sees it as a cost, not a control.
But you can put numbers on it: SecureFlag customers average 2.4x ROI within 12 months.
secureflag.com/solutions/prov…
0
0
0
9
Train embedded and IoT developers to find and fix firmware security issues with our new Microcontroller Labs 🔧
Each lab challenges developers to resolve the root cause in a realistic scenario.
Get started with hands-on firmware security training 👇
blog.secureflag.com/2026/10/27/mic…
Each lab challenges developers to resolve the root cause in a realistic scenario.
Get started with hands-on firmware security training 👇
blog.secureflag.com/2026/10/27/mic…
0
0
0
13
Today’s the day! Join our webinar for a practical look at how threat modeling can keep up with AI-assisted development. Last chance to register 👇
Only one week left until we show you how to bring threat modeling up to speed with AI coding!
No bloated slide decks ❌
Just 45 minutes of live demos ✅
It’s live only, so register now: app.livestorm.co/secureflag/bri…
#ThreatModeling
0
0
1
14
Over half of remediated vulnerabilities recur within a month* 🔁
Patch the instance and the insecure pattern remains, so the bug class returns. Training teams to catch it before production fixes the cause, not the symptom.
Learn more: secureflag.com/solutions/redu…
*CSA 2024
Patch the instance and the insecure pattern remains, so the bug class returns. Training teams to catch it before production fixes the cause, not the symptom.
Learn more: secureflag.com/solutions/redu…
*CSA 2024
0
0
0
21
Research shows that monthly security findings from AI coding assistants rose from about 1,000 to over 10,000 in six months.
An AI fix doesn’t prove a vulnerability is resolved. Developers need the skills to check.
Learn how to prioritize and fix them 👇
blog.secureflag.com/2026/10/23/how…
An AI fix doesn’t prove a vulnerability is resolved. Developers need the skills to check.
Learn how to prioritize and fix them 👇
blog.secureflag.com/2026/10/23/how…
0
0
1
25
AI writes code that LOOKS right far more often than it writes code that IS right. So what can your team do to ensure secure code? Read what our CEO Andrea Scaduto has to say about it in Forbes⬇️
Vibe Coding? Be Sure To Include These Critical Development Steps hubs.li/Q04BQjwk0 from @Kloudportal1 @Netragard @_Rohit_Patel_ @jangid_hastimal and more
0
0
0
21
Security gates at the end of delivery don’t reduce risk, they remediate it after the fact.
Vulnerabilities happen when devs can’t make secure calls in the moment. The fix is skill-building & integrated workflows.
Prevent vulnerabilities at the source 🔗
secureflag.com/solutions/redu…
Vulnerabilities happen when devs can’t make secure calls in the moment. The fix is skill-building & integrated workflows.
Prevent vulnerabilities at the source 🔗
secureflag.com/solutions/redu…
0
0
0
17
PHP’s emergency update fixes PHP2Shell, two critical flaws (CVSS 9.2) 🐘
Memory-handling vulnerabilities are hard to find without hands-on practice, and threat modeling shows what an attacker could reach.
Learn how to limit RCE damage 👇
blog.secureflag.com/2026/10/22/php…
Memory-handling vulnerabilities are hard to find without hands-on practice, and threat modeling shows what an attacker could reach.
Learn how to limit RCE damage 👇
blog.secureflag.com/2026/10/22/php…
0
1
1
23
Giddy up! SecureFlag is heading to LASCON 2026 in Austin, Texas to host a Secure Coding Tournament next week.
🗓️ Oct 29, 9am to 30 Oct, 12noon
📍 Norris Conference Centers
🏆 1st prize: Nintendo Switch 2
Register at eventbrite.co.uk/e/lascon-2026-….
#SecureCoding #CyberSecurity
🗓️ Oct 29, 9am to 30 Oct, 12noon
📍 Norris Conference Centers
🏆 1st prize: Nintendo Switch 2
Register at eventbrite.co.uk/e/lascon-2026-….
#SecureCoding #CyberSecurity
0
0
0
32