West Wind Security

We believe in the power and value of the software you create.
We help developers with application security so they can build more resilient software.

[John N King @JohnNKing]

32 hours to #RSS2018! Looking forward to day 1 keynotes by @samykamkar and @iodboi, and talks by @therealjoetesta, @antitree, @rossja, @claycooper, and @_nu11p0inter

[Rich Smith @iodboi]

@JohnNKing @rocsecsummit Thank you @JohnNKing and all the other @rocsecsummit organizers that worked to put on such a great conference! It was a genuine pleasure to be able visit and share my security journey with everyone at #RSS2018

[John N King @JohnNKing]

@iodboi Thank you so much for keynoting at RSS:2018! It was great to meet you and your talk was phenomenal. #RSS2018 @rocsecsummit

[West Wind Security @westwindsec]

We're very proud to be an in-kind sponsor of @BSidesROC 2018!

[John N King @JohnNKing]

I'm very excited to be leading a Web Application Security workshop @BSidesROC on 4/13. If you're interested, please register today. Tickets are going fast!

[yan @bcrypt]

tl;dr if your app runs a local server it needs to validate the Host header of incoming HTTP requests. Tavis is opening issues for apps where this causes RCE but there’s probably tons more where this will cause privacy leaks https://t.co/qcbaL7x4vT

[West Wind Security @westwindsec]

Static and dynamic analysis tools will help find some types of application security vulnerabilities. But don’t make the mistake of assuming that “some” is good enough.

[West Wind Security @westwindsec]

There are no patches for the software you’ve built yourself.

[West Wind Security @westwindsec]

Good application security hinges on developers. In fact, they have to lead it. Otherwise, you’ll be forever creating vulnerabilities faster than they can be fixed.

[West Wind Security @westwindsec]

Your people are the mind and soul of your security efforts. They provide the foundation and the essentials upon which the success of all security endeavors will surely depend.

[West Wind Security @westwindsec]

Achieving better application security is forever a work in progress. Much like improving one’s self in life - it is something always worked toward and never done. When considering security - look to your developers and culture before you look to products and tools.

[West Wind Security @westwindsec]

@rocsecsummit #rss2017

[West Wind Security @westwindsec]

We had a great time at #RSS2017! Thank you to everyone who attended our talk "Beyond the Top 10". Slides are at: https://t.co/tpKuP0cPyO