Hi there,

1️⃣ Sprint #1: Start where you are

Welcome to the first sprint of OneHourAppSec - we’re so thrilled to have you here with us, dedicating your time to application security. How good! 

This sprint we will lay the foundations for the work ahead of us. Our sprint goal: 

• Understanding what software you have so we can plan to secure it
• Understanding the concept of security debt and making sure we can track it

There is a lot to do but we will do it in small chunks to make it more manageable.

Let’s get into it 👏

🏁Ready to get started?

📽️ [VIDEO] Introducing Sprint 1 (5 minutes)

This first sprint video explains the theme and what to tick off.

Watch now

🎮 New Member Survey (5 minutes)

OneHourAppSec is trying something huge for secure software worldwide. To help us understand our members, we have a very short survey. 

It's just seven questions, with zero personal information, in five minutes of your first sprint.

Click here to get started

📽️ [VIDEO] What is a System Register, and why do you need one? (5 minutes)

We dive into what security debt is and how to set up mechanisms for tracking it.

Watch now

📑 Create your own System Register (25 minutes)

Ready to create a System Register? Great, we have built a template to get you started. 

Click here to get started

📽️ [VIDEO] What is a Security Debt and why does it matter? (5 minutes)

We dive into what security debt is and how to set up mechanisms for tracking it.

Watch now

📑 Start Tracking Security Debt (10 minutes)

We will identify lots of security debt during OneHourAppSec, that's normal, and we don’t judge.  Now is a great time to set up a security debt tracker in your ticketing or issues tool. 

📽️ [VIDEO] Watch-Along - Building a Security Debt Tracker (5 minutes)

Looking for inspiration - watch Laura build her own security debt tracker.

Watch now

🐣 New on the SafeStack blog

• Behavior-Driven Development (BDD) goes rogue
  How do you design software with evil villains in mind? In our latest blog post, we look at the concept of cyber security personas and how it can help make code more secure. 
• The role of product management in cyber security
  Software product managers are a cyber security superpower in our organizations. We dive into how they can use their skills in your organization’s fight against cyber security vulnerability in this post.

-- 

Until next time, stay safe out there!
The SafeStack team 🦄

SafeStack — helping you secure the amazing things you build

Learn from anywhere,
at any time

Stay up to date in an
ever-changing online environment

Take the stress
out of meeting compliance