Hello everyone! I am pleased to report that everything is going surprisingly well! My garden is growing, my travel plans all seem to be working out, and people keep writing to ask about my training. How much better can it get?

I’m briefly back home (planting all the flowers, and transplanting asparagus) while I prepare for my trip to Europe next week when I go will travel to NDC Developer Conference in Oslo, Norway, and then OWASP Global AppSec in Barcelona, Spain. I have included a trip report from my wild week at RSAC and B-Sides SF, with a lot of cute photos. I hope you like them, I certainly enjoyed the moments they represent.

Thank you for subscribing to my little newsletter. I appreciate you.

New Content!

• My trip report from RSAC and B-Sides SF

• I was on the Dev Interrupted podcast with Andrew Zigler and we had a total blast! I also might have said “shift left is stupid”. Oops! Get it here: Audio, video, article

• I was on the ‘Relating to DevSecOps’ podcast, flatteringly entitled: Burn Your 30-page Policies: Tanya’s Got Better Ideas

• I interviewed my friend Scott Helme about Security Headers. He was hilarious, brilliant, and a fountain of nerdy knowledge!

• I was on the Cloud Security Podcast with James Berthoty, Chris Hughes, Tanya Janca, Ashish Rajan and Francis Odum, listen here

• Interviews that I recorded at B-Sides SF and #RSAC Conference:

  • Chris Hughes of Resilient Cyber

  • Dustin Lehr of Katilyst (Security Champions)

  • Marisa Fagan of Katilyst (Security Champions)

  • I’d love to hear feedback about what I should ask when I do interviews like this if you have any burning questions!

Events!

• May 14th, online, a Semgrep Webinar featuring Laura Bell Main and me: Coding Securely Doesn’t Have to Be Boring: A Fireside Chat

• May 21-23, 2025: NDC in Oslo, Norway

• May 29-30, 2025, OWASP Global AppSec EU, Barcelona Spain

• August 4, 2025, Diana Initiative, Vegas, NV, USA

FYI I have applied to Black Hat (Vegas, August), Def Con (Vegas, August), B-Sides Las Vegas (Vegas, August), SecTor (Toronto, October), LASCON (Austin, TX, October), OWASP Global AppSec (Washington DC, November), GoSec (Montreal, September), and Live! 360 Tech Con Orlando (November). Also, one more that is a surprise in December that hasn’t been announced yet. It is my hope that I get into all of them. So this is my tentative travel schedule for the rest of the year, assuming I’m a very lucky person and they accept my submissions. WISH ME LUCK!

Random Topics Go Here

Surprise, I’m doing another mentoring program! My friend Izar and I will be hosting ‘Meet the Mentor’ at OWASP Global AppSec in Barcelona. It’s like speed dating, but for finding a professional mentor. If you will be there, please consider signing up and joining us!

Survey

I made a short survey about this newsletter. Please let me know what you think! And by that I mean, by answering the survey.

We end with a meme.