Hi there, I have so much to share with you with month. I created a survey to help people mature their AppSec programs, and if we get enough data then we will release the dataset and create content from it. I also released a new free course in Semgrep Academy, ‘Security Headers’, with my amazing and brilliant friend Scott Helme (we’re also doing a webinar together). I am also going to be giving a lot of free books away (300) at RSAC at the Semgrep Booth and the schedule is below in the events section.

New Content!

• I made a survey that helps you mature your AppSec, program, check it out here.

• A blog post with links to all of the content I created in the past 9 months

• I made a new free course (with Scott Helme!) for Semgrep Academy: Security Headers

• I was on ‘The Elephant in AppSec’ podcast to talk about secure coding with it’s wonderful host Alexandra Charikova. Of course, we talked about some of my more controversial views! You can watch it here, or listen here.

• I was on a security champion panel, “Security Champion Veterans Explain All.” with Dustin Lehr, Brook Schoenfield, Brendan Sheairs, and Chris Romeo! Check out the video!

• My talk, 'Security Champion Worst Practices', from NDC Security, is now available on YouTube!

• I was on ‘Lessons on C and C++’ with Deb Radcliff! You can watch the video here, or read the article and show notes here.

• I was on the CoversingLabs podcast with Carolynn van Arsdale to talk 'AppSec Girl Power', software development, and secure coding.

• I did an interview with Cybaplug Interviews about, well, everything. Check it out!

Events!

• April 22, 9:00 am Pacific, Mastering Security Headers with Scott Helme & Tanya Janca (virtual, free, Semgrep webinar)

• Sunday April 27th, B-Sides San Francisco! I’m doing a birds of a feather called: AI Dragons: Threats, Risks, and What We Can Do About Them” at 11:15

• April 28-May 1, RSAC, I’m giving a talk with Adam Shostack, on a panel about security champions, and I’m hosting TWO birds of a feather events. Wow.

• Book signings at the Semgrep Booth at RSAC in San Francisco

  • Tuesday April 29th, 1:00 pm

  • Wednesday April 29th: 10:30 am

  • Thursday May 1st: 12:30 pm

• May 21-23, 2025: NDC in Oslo, Norway

• May 29-30, 2025, OWASP Global AppSec EU, Barcelona Spain

Random Topics Go Here

I am attempting to ramp up my secure coding training business. If you know someone who needs training, perhaps you could suggest me? More info here.

Survey

I’m trying something new and adding a survey section to the newsletter. Please feel free to hit reply and suggest ideas of surveys I can add! What would you like to know? What would you like to see in this newsletter? You can hit reply and tell me, and next month I will do a survey for you to answer (if you want). For now…

This month’s survey: How to Mature Your AppSec Program.

We end with a meme.