top of page


A personal blog addressing software quality across all aspects of software development, testing, design, and people.
Search


Secure Coding Starts with the Engineer
With the rapid rise of AI agents and the emergence of increasingly powerful models, some of which may introduce new security risks, it feels timely to revisit the topic of software security. More importantly, it raises the question of how we can write code, often with the assistance of AI, that remains robust and secure in the face of these evolving threats. Code is written, features are delivered, and only near the end of the development cycle does a security team step in to
Craig Risi
Apr 244 min read


Continuous Compliance: Turning Audits Into Automation
When it comes to application security , compliance can often feel like a roadblock: a slow, manual process that lags behind the pace of...
Craig Risi
Aug 8, 20253 min read


Secure Software Development: Building Security Into the Code from Day One
We can secure our access and secure our data ; however, with software the engine driving innovation, it is also a prime target for cyber...
Craig Risi
Jul 11, 20253 min read


Data-Centric Security: Protecting What Matters Most
In my previous post, we looked at the importance of focusing on access control and perimeter security. However, protecting the perimeter...
Craig Risi
Jun 27, 20253 min read


Identity-Centric Security
In my previous post, I started to look at modernizing security, starting with software architecture. However, when looking at secure...
Craig Risi
Jun 21, 20254 min read


Modernizing Enterprise Security through Architectural Design
In the modern digital era, security can no longer be viewed as an afterthought or a final step in the software development lifecycle. In...
Craig Risi
Jun 6, 20254 min read


Modernizing Security
Over the past few months, I’ve shared a range of thoughts on modernization, primarily focused on the functional design of software....
Craig Risi
May 17, 20256 min read


Securing Data in your code
In my last post , I looked at some tips on how to write more secure code. However, it’s not just code alone that developers need to...
Craig Risi
Oct 4, 20246 min read


Tips to making your code more secure
Security is not something we can ever take for granted and no matter how secure a company’s infrastructure and firewalls are, a security...
Craig Risi
Sep 27, 20248 min read


Secure Coding Practices
This article first appeared on Snapt. I previously addressed the need to design secure applications and test for security during...
Craig Risi
Apr 26, 20223 min read


How To Test Application Security
The following article first featured on Snapt. We constantly read about leaks and security attacks that hit well-known applications....
Craig Risi
Apr 20, 20225 min read


Designing Secure Applications
Modern applications are exposed to constant security threats. Malicious actors will try to uncover and exploit any vulnerabilities to...
Craig Risi
Apr 7, 20226 min read
bottom of page