The Purple Blog | Purple Book Community

Featured Topics

Enhancing an Application Security Program: The Importance of Technology in a Maturity Model

Charan Akiri

and

Nov 8, 2023

External Attack Surface Management

Aruneesh Salhotra

and

Oct 13, 2023

What is The Purple Book Community's Scalable Software Security Maturity Model (S3M2)?

Purple Book Community

and

Jun 29, 2023

What parallels can we draw from the NFL to take a risk-based approach for AppSec?

Aruneesh Salhotra

and

Feb 1, 2023

Avoiding Common Vulnerability Management Errors CISOs Still Make

LingRaj Patil

and

Jan 27, 2023

Security Champions: Why Do We Need Them and What Role Do They Play?

How Establishing Guardrails Can Improve AppSec Posture (and Your Holidays)

Nikhil Gupta

and

Dec 20, 2022

The Conundrum of Security Remediation

Mohit Kalra

and

Dec 13, 2022

How to Improve Collaboration Between Developers and Security Professionals

Jim Rutt

and

Dec 9, 2022

Best Practices to Cyber Proof your Business for the Holidays

Deepak Parashar

and

Nov 29, 2022

Embracing New Business Frontiers with Zero Trust Security

Deepak Mathur

and

Nov 23, 2022

The Best Education Resource in Cybersecurity

Valmiki Mukherjee

and

Oct 25, 2022

How AI & ML Transform DevSecOps — Exploring Their Full Potential

Maria Schwenger

and

Oct 11, 2022

Security Metrics That Make a Difference

Tanya Janca

and

Sep 20, 2022

Beefing Up the Software Supply Chain for Security

Cassie Crossley

and

Sep 6, 2022

AppSec Programs: Tips on How to Implement Them and Convince Leadership

Maria Schwenger

and

Aug 23, 2022

How to Improve Your AppSec With Security Champions

Nitin Raina

and

Aug 9, 2022

Top Practices to Help You Transition to AppSec

Sangram Dash

and

Jul 26, 2022

An Introduction to AppSec and Why It’s Important to You

Jennifer McLarnon

and

Jul 12, 2022

SDLC Security Controls

Waldemar Pabon

and

Jun 21, 2022

Bringing Security to the IoT

Mark Merkow

and

Jun 7, 2022

DevSecOps: Four Pillars for Success

Nikhil Gupta

and

May 16, 2022

Why Cybersecurity is Crucial for M&As

Luis Guzmán

and

May 10, 2022

It’s All in the Numbers: Decoding AppSec

Mark Lambert

and

May 3, 2022

AppSecOps: An Astute Business Approach to Security

Munish Gupta

and

Apr 26, 2022

4 GRC Mistakes That Can Derail Your Risk Management Plan

Piyoush Sharma

and

Apr 19, 2022

Join us at AppSecCon 2022 - A Premier AppSec Conference

Chari Monge

and

Apr 12, 2022

How to Convince Leadership to Prioritize Security for Your Business

Kunal Bhattacharya

and

Apr 7, 2022

AppSec: Moving the Collective Needle on Security is the Need of the Hour

Brook S.E. Schoenfield

and

Mar 22, 2022

Why Diversity Is Needed in Security

Chari Monge

and

Mar 8, 2022

5 Ways to Make 2022 More Secure

Andrew Gorecki

and

Feb 22, 2022

Practice Makes Business Better

Cormac Brady

and

Feb 8, 2022

Why Your Business Needs to Evolve to DevSecOps Right Now

Prabhath Karanth

and

Jan 31, 2022

Want to Triple Your Supply Chain Security?

Cassie Crossley

and

Jan 30, 2022

A Movement to Foster Continuous Security

Upendra Mardikar

and

Jan 29, 2022

Welcome toThe Purple Blog

Featured Topics

Enhancing an Application Security Program: The Importance of Technology in a Maturity Model

External Attack Surface Management

What is The Purple Book Community's Scalable Software Security Maturity Model (S3M2)?

Why Maturity Models are Needed in the First Place

How to Address Security Threats in M&A

Breaking Organizational Silos

A Non-Tech Founder’s Guide to CyberSecurity

Why Your Security Strategy Must Evolve Alongside the Threat Landscape

Factorial Separation of Duties for Modern AppSec Compliance

Four Cybersecurity Trends in 2023 from a Digital Transformation Perspective

What parallels can we draw from the NFL to take a risk-based approach for AppSec?

Avoiding Common Vulnerability Management Errors CISOs Still Make

Security Champions: Why Do We Need Them and What Role Do They Play?

How Establishing Guardrails Can Improve AppSec Posture (and Your Holidays)

The Conundrum of Security Remediation

How to Improve Collaboration Between Developers and Security Professionals

Best Practices to Cyber Proof your Business for the Holidays

Embracing New Business Frontiers with Zero Trust Security

The Best Education Resource in Cybersecurity

How AI & ML Transform DevSecOps — Exploring Their Full Potential

Security Metrics That Make a Difference

Beefing Up the Software Supply Chain for Security

AppSec Programs: Tips on How to Implement Them and Convince Leadership

How to Improve Your AppSec With Security Champions

Top Practices to Help You Transition to AppSec

An Introduction to AppSec and Why It’s Important to You

SDLC Security Controls

Bringing Security to the IoT

DevSecOps: Four Pillars for Success

Why Cybersecurity is Crucial for M&As

It’s All in the Numbers: Decoding AppSec

AppSecOps: An Astute Business Approach to Security

4 GRC Mistakes That Can Derail Your Risk Management Plan

Join us at AppSecCon 2022 - A Premier AppSec Conference

How to Convince Leadership to Prioritize Security for Your Business

AppSec: Moving the Collective Needle on Security is the Need of the Hour

Why Diversity Is Needed in Security

5 Ways to Make 2022 More Secure

Practice Makes Business Better

Why Your Business Needs to Evolve to DevSecOps Right Now

Want to Triple Your Supply Chain Security?

A Movement to Foster Continuous Security

Follow us

Get Updates!

Welcome to
The Purple Blog