Skip to content

AppSec Observer

The latest trends and tips in DevSecOps through instrumentation and security observability. Learn about real-world insight and “in-the-trenches” experiences on topics ranging from application and information security to DevOps and risk management.

Subscribe to Blog
Insecure deserialization in AWS Lambda

Insecure deserialization in AWS Lambda

At the beginning of December, many companies worldwide were hit by the newly discovered vulnerability known as..

Cybersecurity Insights with Contrast CISO David Lindner | 8/26

Cybersecurity Insights with Contrast CISO David Lindner | 8/26

Insight #1 " If you are struggling with the adoption of MFA across your organization, it’s time to focus all your..

Cybersecurity Insights with Contrast CISO David Lindner | 8/19

Cybersecurity Insights with Contrast CISO David Lindner | 8/19

Insight #1 " The National Defense Authorization Act for Fiscal Year 2023 was recently passed by the US House. This bill..

Building a modern API security strategy — API protection

Building a modern API security strategy — API protection

Part four of the five-part series, Building a modern API security strategy.

How to scan for cybersecurity risks on every commit with CodeSec and Git Hooks for free

How to scan for cybersecurity risks on every commit with CodeSec and Git Hooks for free

Good programmers are lazy. It’s a common euphemism in the software development world: a humorous, counterintuitive..

Secure serverless code for free with CodeSec - Now available in AWS Marketplace

Secure serverless code for free with CodeSec - Now available in AWS Marketplace

As of August 12, 2022, Contrast Security's new, free developer security tool,  CodeSec, will be available in AWS..

Debunking the myths around RASP

Debunking the myths around RASP

Welcome to the second part of this series examining some of the myths that I’ve heard in many conversations around..

Close the DevSecOps divide with Ted Lassos

Close the DevSecOps divide with Ted Lassos

You hear it over and over: There’s a yawning cybersecurity workforce gap. The U.S. Bureau of Labor stats pegged it at..

Contrast Assess is a select product for IAST in IDC’s TechBrief

Contrast Assess is a select product for IAST in IDC’s TechBrief

Contrast Security today has been included as a select product for Interactive Application Security Testing in the IDC..