Painless Application Security Training for Enterprises. Empower Your Teams. Build Secure Applications.
United States
- Tweets 5,392
- Following 208
- Followers 4,798
- Likes 1,572
4 Application Security Courses that will empower you to become a great Application Security Engineer:
🧵
#appsec #aws #infosec #cloudsecurity
18
183
589
Tired of the slow pace of Threat Modeling? We're here to change that! Explore "Threat Modeling with GenAI & LLMs" in our upcoming webinar.
Join @abhaybhargav for a sneak peek into our revolutionary course.
Let’s push the boundaries of cybersecurity!
Date: 26th March 2024
Time: 9 AM PT
Apply to attend - vimeo.com/event/4162184
#webinar #cybersecurity #threatmodeling #GenAI #LLM
8
13
259
26,002
Want to learn Cloud Security but not sure where to start?
Here's 5 courses you need to take, from AWS to Kubernetes
A 🧵:
#AppSec #CloudSecurity #AWS #Kubernetes
14
102
294
Learning AWS Security?
You should know these underrated security practices:
🧵
#aws #appsec #cloudsecurity #awsevents @aws
3
48
232
Planning to start learning #cloudsecurity?
Here is the best beginner approach to start with cloud security:
🧵
#AWS #azure #appsec #infosec
6
84
191
The demand for #cloudsecurity engineers is high. 🚀
Learning these skills will make you the most in-demand cloud security engineer.
🧵
#appsec #infosec #aws #azure
6
62
191
Application Security is one of the top skills that every tech firm is aggressively looking for 🚀
If you are a person who wants to make a great career in AppSec, this thread is for you 👇
🧵
#applicationsecurity #infosec #cloudsec #azure #aws
5
63
185
If you are planning to make a career in #cloudsecurity, then this is the right time to make the dream possible.
How?
Let's check some stats!
🧵
#appsec #azure #aws
4
46
159
Have you used @pdnuclei to scan your apps for vulnerabilities? You should!
Because Nuclei has ONE amazing feature that sets it apart from other security tools.
Here's how Nuclei solves the most common problem with vulnerability scanners:
1/8
#nuclei #vulnerabilities
3
51
152
Tools are the best friends of every Application Security Engineer.
Here is the list of some of the best tools that go well with @AWS.
#aws #cloudsecurity #appsec #infosec
4
51
132
Facing the surge in supply chain attacks?🛡️
Join us at the @BlackHatEvents ASIA 2024 for our in-depth, hands-on training empowers you with red-team tactics to secure applications.
Sign up now & save $300 SGD!👇
blackhat.com/asia-24/trainin…
#applicationsecurity #supplychain #appsec
10
5
78
1,436,702
Learning Application Security?
Watch for these four #appsec trends for 2022 (and beyond):
🧵
1
24
120
Master multicloud security at the @BlackHatEvents Asia 2024!
Attack, detect, and defend across #AWS, #Azure, & #GCP like never before. Learn to navigate through complex cloud environments with ease.
Sign up now & save $300 SGD! 👇
blackhat.com/asia-24/trainin…
#Blackhat #CloudSecurity
ALT Cloud Security Training
4
2
85
1,221,767
If you are learning cloud security architecture, you should know these 'Seven Commandments' of Cloud Security Architecture:
🧵
#aws #cloudsecurity #appsec #infosec
2
34
111
If you are someone learning @kubernetesio security, this thread will help you understand the key terminologies in #Kubernetes.
🧵
2
40
94
The same teenager who hacked Uber also broke into Rockstar Games.
Using the exact same technique.
They took a common security feature & weaponized it against the users themselves.
It all started with a text message:
1/
1
19
90
Giveaway Alert! 🎁
Here’s your chance to attend our members-only live event on 18th July.
One lucky winner will get our Pro Annual subscription priced at $399 for FREE.
To enter:
1️⃣ Follow us on Twitter.
2️⃣ Tag a fellow AppSec Enthusiast in the comments.
3️⃣ Retweet this post for an even better chance to win!
Join the excitement, enhance your skills, and be a part
the @AppSecEngineer community.
Enter now for a shot at this incredible opportunity!
Good luck!
Please note: The winner will be announced on 17th July.
#Giveaway #Cybersecurity #AppSec #training
82
89
82
30,794
What’s got two thumbs AND zero false positives? This guy, using custom @pdnuclei templates!
Check out our Nuclei Automation for DevSecOps course here: appsecengineer.com/courses-c…
#devsecops #meme
1
8
64
26,206
Learning #ApplicationSecurity?
Here are eights things you can be doing right now to fast-track your #AppSec career:
🧵
#infosec
1
19
59
Learning #CloudSecurity?
Learn This 4 Unconventional Ways to Level Up Your Cloud Security Career Right Now 🚀
🧵
#aws #awsevent #appsec #infosec
3
17
59
We're in LOVE with @pdnuclei templates! They let you:
- customize your security scans
- look for specific vulnerabilities
- reduce/eliminate false positives
Here's a Deep-Dive into Templates, Workflows & DevSecOps with Nuclei:
1/8
#nuclei #devsecops
2
16
58
How do you level up DAST scans on your REST APIs?
Automate them, of course!
Here are our Top 8 Free Tools for Automating REST API Testing:
#api #automation
2
17
46
Want to learn @awscloud Security but not sure where to start?
Here's a super-useful Learning Roadmap for AWS Security:
(Keep reading to get the full roadmap diagram👇 )
#awssecurity #cloudsecurity
1
15
51
Hey, you know what they say: stereotypes exist for a reason.
Any more you can add to this list?
10
47
Nuclei is an open-source tool that enables rapid and customizable vulnerability scans based on YAML and DSL.
To empower Nuclei, templates can be used to define the type of vulnerabilities @pdnuclei need to search for.
Learn More:
appsecengineer.com/blog/test…
#nuclei #devsecops
1
12
42
7,645
A career in #CloudSecurity is an extremely hot option!
Here @abhaybhargav gives 3 evergreen tips to folk who wants to build a promising cloud security career. (Plus a bonus tip 🤩)
P:S: Check out 🧵 to learn how you could start and level up your cloud sec career!
#aws #azure
1
4
38
The demand for #cloudsecurity engineers is high 🚀
Learning these skills will make you the most in-demand cloud security engineer.
#appsec #infosec #aws #azure
2
9
36
Are you planning to become a Cloud Security Architecture?
But not sure what skills you need to become the one?
Then this 🧵is for you 👇
#cloudsecurity #aws #awssecurity #appsec #infosec
2
13
35
Let's learn more about container security in part 2 of our series: Containers 101.
In this thread, we'll learn:
what Docker is
how it works
if Docker is secure
To start off, what is #Docker? 👇
#containersecurity
1/7
2
7
32
3,809
A thread of helpful threads! 😀
Every #AppSec Engineer must check.
🧵
3
7
35
Let's learn the basics of Threat Modeling!
Here's the Top 5 Threat Modeling methodologies, and how they work.
#threatmodeling
1
10
34
If you are someone learning @kubernetesio security, this thread will help you understand the key terminologies in #Kubernetes.
🧵
1
10
31
1 /
Kubernetes 101
This beginner course will teach you the fundamentals of the #Kubernetes cluster.
It heavily emphasizes practical learning by giving you opportunities to use live labs and implement everything you learn.
Check out: appsecengineer.com/courses-c…
1
2
31
Wish to be Application Security job-ready by the end of 2022?
Follow these tips 🧵
#appsec #cloudsecurity #aws
1
2
20
Wish to be Application Security job-ready by the end of 2022?
Follow these tips 🧵
#appsec #cloudsecurity
1
6
28
Thinking about learning Container Security but not sure where to start?
You're in luck, because we're starting a new series: Container Security 101!
In today's thread, you'll learn 5 Basic Docker Terminologies: 👇
(Follow us so you don't miss the rest!)
#containersecurity
1
9
30
3,066
Stop automating security scans in Jenkins, use Gaia instead!
Let's learn the basics of #DevSecOps with Gaia in a quick thread.
This is a small slice of our brand-new Gaia course on AppSecEngineer👇
1/9
1
6
27
4,441
Let's learn the basics of Threat Modeling!
Here's the Top 5 Threat Modeling methodologies, and how they work.
#threatmodeling #appsec
1
3
27
4,301
Input validation is possibly the MOST important security measure for your application.
Just doing this one thing right can get rid of 50-60% of your vulnerabilities.
Buuuut...it's very difficult to get right.
How does it work? Let's get right into it👇
1/11
#devsecops
1
4
28
4,508
This course is releasing on 17th October, so stay tuned for more info! We’ve got some brand-new hands-on exercises for you.
Learn more here:
appsecengineer.com/courses-c…
1
12
27
Learning #cloudsecurity?
These skills will help you become an expert in cloud security:
🧵
#aws #awsevents #azure #appsec
1
6
24
Planning to start a career in #cloudsecurity?
Here we have got one of the best hands-on labs, thoughtfully curated by veterans in Application Security.
Check out:
@AWS Security: appsecengineer.com/product/a…
@Azure Security: appsecengineer.com/product/a…
#appsec #infosec #aws #azure
1
7
23
Fun fact: security is currently one of the top 5 most in-demand tech skills.
Despite massive layoffs, tech companies NEED security professionals to build customer trust right now.
Looking for an #AppSec job? Here's 4 security skills that will make you an instant hire in 2023:
1
5
24
3,552
You've heard of Role-Based Access Control (RBAC).
You've heard of Attribute-based access control (ABAC).
Now get ready for the best of both in one: Amazon Verified Permissions.
What is it? A short 🧵
#rbac #awssecurity #cloudsecurity
1
3
24
Let's talk Basics of Kubernetes Security!
Here are the 6 Methods for Authentication in Kubernetes:
(Plus, which is BEST for security?)
1/
1
10
23
2 /
Threat Modeling Essentials
This course teaches you everything you need to learn about #ThreatModelling.
This course is the best fit for people who wish to get started in Application Security.
Check out: appsecengineer.com/courses-c…
2
23
When you decide to learn Application Security, #ThreatModeling is one of the first things you hear about.
What's exactly it?
How many methodologies does it have?
And how can I build a good threat model?
Let's answer all of your questions with this 🧵
1
5
25
Welcome new followers👋
Thanks for following us! We regularly post about:
✨ Application Security
✨ Cloud Security
✨ #Kubernetes
✨ #API Security
✨ Threat Modeling Etc
Check out our resources, carefully curated by the veteran in #AppSec.
🧵
1
5
23
Have you started threat modeling your apps yet?
If yes, read this. If no, DEFINITELY read this.
These are the 5 Biggest Myths in Threat Modeling:
#threatmodeling
1
6
22
Good tools can help you detect vulnerabilities in your workflow, but they can only go so far — you need to know how to properly use them.
Don’t know where to start?
Deep-dive into @pdnuclei Templates with @AppSecEngineer. appsecengineer.com/blog/nucl…
#nuclei #devsecops
2
22
2,558
Thinking about learning #ContainerSecurity but not sure where to start?
You're in luck, because we're starting a new series: Container Security 101!
In today's thread, you'll learn 5 Basic #Docker Terminologies: 👇
(Follow us so you don't miss the rest!)
1
4
20
3,277
Want to become a Cloud Security Architect?
Join @abhaybhargav in this step-by-step guide where he’ll walk you through the path to mastery in cloud security architecture.
Watch now and kickstart your journey!💡
piped.video/jLx4V0nx7lI
#CloudSecurity #career #securityarchitect
3
17
2,559
Our course on 'Essential AWS API Gateway Security' is out now!
Learn about rate limiting, JWTs, custom JWT authorizers, JSON Schemas, & mTLS with hands-on labs that prepare you for real-world security scenarios.
Know more: appsecengineer.com/courses-c…
#AWS #API #cloudsecurity
4
21
2,546
4 /
Essential AWS Security Monitoring
This newly launched course will help you explore the @AWS monitoring landscape and the various features of Cloudwatch.
Check out: appsecengineer.com/courses-c…
3
1
20
So you're a newbie security researcher who wants to learn recon. You're probably wondering...
"Do I need to code? And if so, what skills do I need?"
In this thread we're going to answer these questions + give some useful tips.
Read on👇
1/7
#recon #coding #offensivesecurity
1
4
19
5,956
As the largest cloud services provider globally, AWS powers complex applications distributed by big corporations & government offices.
Here are 7 of the most significant @awscloud security vulnerabilities businesses need to avoid & work on.
#aws #awssecurity #cloudsecurity
5
18
We're continuing our journey into the basics of Containers in our series, Containers 101!
In this thread, you'll learn about keystone principles of using Docker (general best practices).
Let's dive in! 🤿
#containersecurity #docker
1
3
18
2,286
Take your @googlecloud Security skills to the next level with AppSecEngineer!
Our comprehensive training covers everything from securing your infrastructure to securing your data. Get trained today!
appsecengineer.com/blog/all-…
#googlecloud #gcpsecurity #cloudsecurity
6
17
3,959
If you're on the cloud, you're probably on @awscloud.
But so is every single cybercriminal on the planet.
These are the 5 Biggest AWS Security Threats you should look out for:
#aws #awssecurity
1
4
17
2,566
Are you looking to enhance your skills and secure your Jenkins CI/CD pipelines?
Look no further! Check out our brand new on Jenkins Security Best Practices.
Learn everything right from AuditLogs & access control, to installing & configuring plugins securely.
#Jenkins #DevSecOps
3
17
2,374
Think you're secure? Think again!
SAST tools are a crucial part of any security strategy, but they're not foolproof.
Stay ahead of the game and learn how to optimize your scans with these expert tips from @abhaybhargav! 🔒🔍
#SAST #tools #devsecops #appsec #applicationsecurity
2
18
10,450
New Video out! 🤩
Gain 3 powerful tips that will help you do extraordinary in your cloud security career!
Watch till the end - BONUS is ahead.
piped.video/watch?v=n1ZkErYD…
@abhaybhargav @awscloud @Azure @goserverless
#infosec #cloudsecurity #appsec
6
18
Developers hate security because they don't understand it.
But today, you just can't afford to write insecure code.
Here's a Comprehensive Guide to Learning Secure Coding:
#securecoding #devsecops
1
6
16
Learn AWS from the expert!
Check out our #AWS Security hands-on lab that will train you to be the rockstar in #AWSSecurity.
appsecengineer.com/product/a…
3
17
Launching the #AppSecEngineer Podcast! A series of interviews with the best minds in the industry, exclusively for the #appsec nerds.
We're kicking off with this insightful chat with @DinisCruz CISO/CTO at @GlasswallCDR - bit.ly/2IT1tbC #cloudsecurity @abhaybhargav
3
16
1 / Fundamental #cloudsecurity Skillset!
👉 Knowledge of cloud security policies and governance
👉 Cloud Security Assessment
👉 Cloud Security Risk Management
👉 Cloud Service Integration
1
1
16
Open Policy Agent? That’s old school.
Securely manage workloads on your @kubernetesio clusters with this handy new tool, @Kyverno
In his latest video, @abhaybhargav does a demo on how to use it for your apps. piped.video/8fgrjBnxqi0
1
7
17
Time to get an AppSec Booster Shot! ⚡
Something exciting is on the way - stay tuned!
#appsec #CybersecurityAwarenessMonth #Application #cybersecurity #cloudsecurity #threatmodeling #Kubernetes #technology
1
14
16
Learning AWS Security?
You should know these underrated security practices:
🧵
#aws #appsec #cloudsecurity #awsevents @aws
1
7
15
Love this thread?
Share with your AppSec buddies and follow us for more such actionable #appsec content. 💥
Wish to learn more about - how to become Application Security Engineer? Read the definitive Guide 👉
appsecengineer.com/blog/guid…
2
6
13
We've compiled 7 of the most significant #AWS security vulnerabilities businesses need to avoid & work on.
Want to learn #awssecurity, but don’t want the full @AppSecEngineer subscription?
Try our AWS Security Specialist Bundle: checkout.appsecengineer.com/…
#cloudsecurity #cloud
2
16
1,726
3 /
Introduction to #Azure
Open the doors of the world of @Azure.
This course will teach you the fundamentals of Azure and its multitude of services and features, including its various security services.
Check out: appsecengineer.com/courses-c…
1
1
16
Introducing our new course "DevSecOps with Azure DevOps"🚀
In this hands-on course, you'll learn how to build security automation pipelines using @Azure DevOps. Automate static, dynamic, & source composition analysis with ease!🛡️
Learn more: appsecengineer.com/courses-c…
#DevSecOps
4
14
2,563
Unlock the language of #AppSec with our comprehensive glossary of 50 essential terms!🛡️
Take your security career to new heights with @AppSecEngineer.
Start learning today!
appsecengineer.com/blog/appl…
#applicationsecurity #glossary
1
286
We’re starting a new series on learning API security!
To start, here’s a quick intro to REST APIs.
BTW, all this is from our API Security: Attack & Defense course, link in the replies👇
#API #rest #http #apisecurity
ALT REST APIs are a type of API that conforms to the representational state transfer (REST) style of architecture. REST has 6 key design principles: All API requests for the same resource should look the same Client & server applications must be independent of each other Each request needs to include all info necessary to process it (stateless) Resources should be cacheable on the client or server side API calls and responses go through multiple layers While most resources are static, REST APIs can also send executable code How it works REST APIs use HTTP requests to communicate, allowing you to perform standard database functions like creating, reading, updating, and deleting records (CRUD) in a given resource. For eg., you can use a GET request to retrieve records, POST request to create a record, or DELETE to, well, delete it. REST APIs typically consume & return JSON files, but it also supports YAML & XML file formats. REST API Security Considerations
1
1
14
1,377
New to @awscloud Security?
Here's our Top 8 Security Best Practices for AWS:
#aws #awssecurity #cloudsecurity
1
5
16
Our list:
@abhaybhargav 👉 for actionable AppSec content and value-packed live sessions.
@harshbothra_ 👉 for a daily dose of awesome #AppSec tweets, and a detailed view on security.
@sharathkramadas 👉 for quick #cloudsec tips, and excellent live-code sessions.
2
4
14
🎥
A brand new workshop is heading your way #appsec folks 🚀
@bondijois is diving into @kubernetesio with @AWS on April 7.
🔬 Featuring hands-on labs you get to try yourself for free!
💬 For more details, hop on the ASE Discord!
#k8s #kubernetes #aws #cloudsecurity #infosec
9
14
There's even a template directory where you can find publicly available Nuclei templates.
You can find templates for specific CVEs, workflows, and more. Check it out:
nuclei-templates.netlify.app…
7/8
1
4
15
Types of #ThreatModeling: Top 5 Methodologies
⚡ STRIDE
⚡ PASTA
⚡ VAST
⚡ TRIKE
⚡ OCTAVE
Let's learn about them in-depth:
bit.ly/asethreatmode
#appsec #infosec #applicationsecurity #CybersecurityAwarenessMonth
4
14
AWS IAM policies, the key to secure cloud access!
Control access to @awscloud resources with ease by creating, updating & deleting policies. Give users only the permissions they need with granular policy conditions & management.
Your infrastructure, your rules!
#cloudsecurity
1
5
14
1,441
What are the best #infosec leaders to follow on Twitter?
Drop their Twitter handles here in comments ... 👇
#appsec #infosec #cloudsecurity #threatmodeling #k8s
2
2
14
A few years ago, one of the world's biggest booking websites had an API vulnerability that accidentally gave access to flight & hotel bookings of over 3 MILLION people.
And all it took was a little Google hacking to pull it off.
Here's what happened:
#APISecurity #AppSec
1/10
1
3
14
1,463
Let's talk Basics of Kubernetes Security!
How do Roles & RoleBindings work?
What is Role-Based Access Control (RBAC) & why do you need it?
Read all about K8s Authorization (AuthZ) here:
#kubernetes #rbac
1/
1
8
14
Ready to take your AWS security to the next level?🎉
Watch this live code video and learn how to audit your @awscloud environment and identify potential security gaps.
Join us and become an AWS security pro! 🚨
piped.video/live/pJxECa1H6bo…
#aws #awssecurity #cloudsecurity
1
15
1,159
Fun fact: security is currently one of the top 5 most in-demand tech skills.
Despite massive layoffs, tech companies NEED security professionals to build customer trust right now.
Looking for an #AppSec job? Here's 4 security skills that will make you an instant hire in 2023:
1
2
13
2,963