This document is a comprehensive guide developed by the Center for Internet Security (CIS) in collaboration with SAFECode and a community of experts. It provides a practical, evaluable framework to… Read More »CIS Secure by Design: A Guide to Assessing Software Security Practices ★★★★★
The CSA MLOps Overview content provides industry guidance on the principles and practices for securely and efficiently operationalizing machine learning models in production. It emphasizes the integration of security practices… Read More »CSA MLOps Overview
The OWASP Application Security Verification Standard (ASVS) is a comprehensive framework that defines security requirements for designing, developing, and testing web applications and APIs. It is organized into 14 chapters,… Read More »OWASP Application Security Verification Standard (ASVS) 5.0 ★★★★★
NIST SP 800-218, the Secure Software Development Framework (SSDF), provides a set of high-level, fundamental practices designed to integrate security throughout the software development lifecycle (SDLC). The framework is organized… Read More »NIST SP 800-218 Secure Software Development Framework (SSDF)
The OWASP Top Ten is a widely recognized list that highlights the ten most critical security risks facing web applications today. Updated every few years by security experts, the list… Read More »OWASP Top Ten ★★★★★
The MITRE Common Attack Pattern Enumeration and Classification (CAPEC) is a publicly available, comprehensive catalog that documents and categorizes common attack patterns used by adversaries to exploit software and systems.… Read More »MITRE CAPEC – Common Attack Pattern Enumeration and Classification Version 3.9