Practical Secure Coding Training for Developers, DevOps and QA engineers.
London, UK
- Tweets 481
- Following 7
- Followers 324
- Likes 84
Pinned Tweet
SecureFlag is the only 💯 Hands-On Secure Coding Training platform for Developers, DevOps & QA engineers.
Learn how to identify and remediate real security issues using familiar tools and technologies in an authentic development environment 📲bit.ly/3LXkMil
4
5
1,335
Next Tuesday, we will be at SecTor at Metro Toronto Convention Centre ready to chat you through our secure coding training offerings!
Two weeks till SecTor, Canada's largest cybersecurity conference! Catch our team there and we'll walk you through how our secure coding training and threat modeling products reduce underground and corporate security threats.
#SecureCoding #AppSec #Cybersecurity
32
Reading an AI security standard is one thing; applying it is another. Our new two-part course on the OWASP #AISVS puts theory into practice 👾
Course 1 covers build-time security, while course 2 covers runtime. Labs mapped to every chapter.
Learn more 🔗
blog.secureflag.com/2026/09/…
1
21
See you in sunny Singapore for GovWare, Asia's premier cybersecurity information platform 😎
Come find us to see how SecureFlag helps development teams build secure code through hands-on labs in real environments.
#Cybersecurity #SecureCoding #AppSec #DevSecOps #Singapore
30
Get personalized security training for AI-assisted development via our MCP Server 🎯
Inside AI coding assistants, SecureFlag recommends hands-on labs matched to the feature and existing skills so devs can guide and review AI code.
See it in action 👇
blog.secureflag.com/2026/09/…
1
29
Two weeks till SecTor, Canada's largest cybersecurity conference! Catch our team there and we'll walk you through how our secure coding training and threat modeling products reduce underground and corporate security threats.
#SecureCoding #AppSec #Cybersecurity
55
Devs using AI assistants often write less secure code, yet feel more confident it's safe 🤔
Dedicated training builds the skills to treat AI-generated code as a starting point, not a finished product.
Turn AI overconfidence into competence: blog.secureflag.com/2026/09/…
#AISecurity
1
31
SecureFlag recently worked with Betfred, one of the UK's largest independent bookmakers, on a secure coding training program that engaged its engineers with some healthy competition! Learn how we ignited the team spirit in our case study 👇
secureflag.com/resources/cas…
14
AI is changing how developers write code. SecureFlag's new MCP Server makes sure security keeps up ⚡
Get threat modeling and secure coding training inside the AI coding assistants where development happens.
See it in action: blog.secureflag.com/2026/09/…
#MCP #ModelContextProtocol
Introducing the SecureFlag MCP Server
Part 1 of the SecureFlag MCP Server series
blog.secureflag.com 31
TOCTOU is a decades-old flaw still hitting modern software—including the tools behind Docker and Kubernetes ⚙️
The pattern: a system checks something, then acts. Attackers exploit the gap in between.
Learn how to prevent it: blog.secureflag.com/2026/09/…
#TOCTOU #RaceConditions
1
30
Last chance to register for our webinar! Join us later today for a practical session on securing AI-assisted development 👇
Are you trying to balance AI-boosted productivity with application security? One week to go until our webinar where we'll share practical tips to help your team code securely with AI assistants.
Live only, save your seat now 👉 app.livestorm.co/secureflag/…
#AppSec #DevSecOps
1
73
87% of organizations are already working toward post-quantum cryptography. With “harvest now, decrypt later” attacks in play, our new course helps developers get ahead of the shift 🔐
Learn more at blog.secureflag.com/2026/09/…
#PostQuantumCryptography #CryptoAgility #QuantumRisk
23
Anna Pieczatkowska (Sonova, Cyber Aperitivo) chats on emoji smuggling, risky AI tools TikTok won't tell you about, and why MFA still gets skipped on the new episode of SecurePod.
Listen now:
🔴 piped.video/n9UHK1f3n9Y?si=YYt3…
🟢 open.spotify.com/episode/7Dg…
#cybersecurity
31
AI can write your code in seconds but is anyone trained to direct it? Our CEO Andrea Scaduto breaks down why secure coding training needs to evolve as developers become orchestrators of AI-generated code, via @Forbes 👇
Read it at forbes.com/councils/forbeste…
1
25
Are you trying to balance AI-boosted productivity with application security? One week to go until our webinar where we'll share practical tips to help your team code securely with AI assistants.
Live only, save your seat now 👉 app.livestorm.co/secureflag/…
#AppSec #DevSecOps
1
130
Microsoft's security team flagged it: AI agents get broad access because it's fast, and no one narrows it later 🚩
Threat modeling catches what least-privilege reviews miss. That's where AI governance should start.
Read more: blog.secureflag.com/2026/08/…
#AIGovernance
2
28
AI is writing more code than ever, but faster doesn't mean safer. Our CTO Emilio Pinna shares 5 tactics to secure AI-generated code in @TalkDev — from security-first prompting to org-wide AI policies.
#AISecurity #SecureCoding #AppSec #DevSecOps
What if the code saving your team hours is also introducing hidden risks?
AI-generated code can introduce hidden vulnerabilities. Emilio Pinna, explains how secure prompting, testing, and human validation can reduce the risk.
Read full article: tinyurl.com/2xk7hruh
#TalkDev
ALT 5 Top Tactics to Secure AI-Generated Code “The AI cannot always distinguish between a pattern that is merely common and one that is actually safe.” By Emilio Pinna, CTO and Founder of SecureFlag
33
Our new OWASP MCP Top 10 course is here! 🔐
~40% of remote MCP servers expose tools without authentication, so developers need MCP security skills. SecureFlag pairs each risk with a hands-on training lab.
Secure your AI agent connections: blog.secureflag.com/2026/08/…
#MCPSecurity
1
2
113
Threat models built once and filed away are out of date by next sprint. DevSecOps makes threat modeling continuous ✅
Live models keep pace with agentic development and produce evidence for PCI DSS, HIPAA and SOC 2.
See how to integrate them: blog.secureflag.com/2026/08/…
#DevSecOps
26
43% of organizations are still at the lowest level of AppSec maturity 📉
More tools won't fix it if developers can't act on findings. Maturity comes from threat modeling, hands-on training and measurement.
Move from reactive to proactive AppSec: blog.secureflag.com/2026/08/…
#AppSec
1
1
25
Purpose-built AI coding models fail 49% of security tests, worse than general-purpose models, per Veracode ⚠️
Training a model to write code faster doesn't train it to write it securely. A #SecureSDLC catches vulnerabilities before they ship.
Learn more🔗blog.secureflag.com/2026/08/…
1
1
35