Research & Updates
Research and updates from the Society
Our latest published articles, and where to follow new research and community updates.
Latest articles
- API Security 13 min
API Security Testing: The Complete Guide for Developers
What to test in an API, how to test it, and how to turn the most important checks into automated tests, mapped to the OWASP API Security Top 10.
- Application Security 14 min
OWASP Top 10 2025 Explained: The 10 Biggest Web Application Security Risks
The OWASP Top 10 2025 explained: all ten categories in official order, what changed since 2021, and how to prevent each risk.
- Careers 6 min
Day One as a SOC Analyst: What to Actually Expect
Your first shift in a Security Operations Center is equal parts adrenaline and information overload. Here is how to survive — and thrive.
- Network 8 min
Reading Your First PCAP Without Losing Your Mind
Packet captures look intimidating, but a handful of filters and a clear methodology will get you to the answer fast.
- Threat Intel 7 min
MITRE ATT&CK for Defenders: A Practical Primer
ATT&CK is more than a poster on the wall. Here is how to actually use it to improve detection coverage.
- AI Security 5 min
Prompt Injection: The New Frontier of AppSec
As applications wire LLMs into their core, a new class of vulnerabilities is emerging. Here is what analysts need to know.
Planning a security assessment?
Tell us about your application, API, or software security requirements. We can discuss the appropriate scope and next steps.
What happens next
- 01We review your enquiry and reply by email
- 02An initial discussion about your application and goals
- 03A written scope — nothing is tested until it's agreed