Talks about secure coding for humans and AI.
Joined March 2008
- Tweets636
- Following4
- Followers837
- Likes2.1K
Ron Perris retweeted
I'm going to be on a podcast tomorrow with @Veracode and the OG himself, @WeldPond
Please join us!
veracode.com/resources/webin…
Ron Perris retweeted
Claude Code and Codex are now writing a major portion of the world's new code.
But why are they not talking about how secure the code is that they are writing, and instead are focusing on their hacking capabilities?
Because AI does not code securely by default. There are dozens of reports and studies that echo this.
Everyone is focusing on scanning that insecure code in all kinds of fantastic and clever ways!
Manicode.ai is taking a very different route. We're literally defining a new AppSec/AI product category.
We have built a massive trove of prompts and skills to use in the AI-based SDLC to get your agents to write secure code up front!
It's super bad ass.
But it's a very new product category that requires knowledge and expertise with AI based development.
And we are here to help!
[email protected] #hitMeUp
Ron Perris retweeted
Using AI to write code? Join me for a free webinar on making that code more secure.
AI Secure Coding Maturity Model
Oct 28, 8–9 AM Pacific / 11 AM–noon Eastern
Clear requirements, useful context, tests, review, and a 30-day plan.
manicode.com/webinar/
Ron Perris retweeted
AI coding has changed my security workflow dramatically:
Old way:
Write code → review code → find security bug → fix bug → repeat.
New way:
Tell the AI the security requirements → generate secure code → verify it.
Turns out the cheapest vulnerability to fix is the one your AI never writes.
manicode.ai
Ron Perris retweeted
Free webinar: Spec-Driven Secure Development with AI
Thu, July 2 · 10 AM PT
Vibe-coding ships bugs. Spec-driven coding ships secure software.
In 60 min:
- Bake security into the spec first
- Drive Claude Code with secure coding prompts
- Claude Code + Codex: build, review, verify
- Live Q&A
100% demo 0 slides: us06web.zoom.us/meeting/regi…
Ron Perris retweeted
The @OWASP_AISVS 1.0 is now released and live!
github.com/OWASP/AISVS/blob/…
cc @ottosulin @ricokomenda Russ Memisyazici and Raza Sharif
I felt a sense of relief today, knowing humans are not on the hook to solve so many problems alone anymore.
Ron Perris retweeted
New startup has been founded! $12.5M seed round led by Ballistic Ventures. Vulnerability management — everyone knows it’s broken. With ~50% of breach losses originating for remotely exploited vulns, "fixing" this one area will have the greatest impact on cybersecurity.
Thank you to everyone who supported us. It means the world.
We’re excited to announce Root Evidence, a company solving vulnerability management by focusing on the <1% that actually cause breach loss.
Built by the team behind WhiteHat and Bit Discovery, Root Evidence is launching with $12.5M in funding led by Ballistic Ventures.
Proof over probability. Fix what’s real.
Read the full press release: rootevidence.com/news/root-e…
Ron Perris retweeted
Our course on rapidly building secure ReactJS applications with AI is now live! AI is horrible at secure coding. This course makes it dramatically better.
udemy.com/course/the-complet…
Ron Perris retweeted
One of the biggest impacts of AI that goes kind of unnoticed is that we’re about to see an explosion of poorly built applications.
Specifically, applications built completely by AI with no thought of security whatsoever.
🧵
This is the way.
My @LocoMocoSec keynote slides on "Google's Recipe for Scaling (Web) Security" are online now: speakerdeck.com/lweichselbau…
Ron Perris retweeted
Good morning from day 2 of @LocoMocoSec where even the chicken's vibes are immaculate.
Ron Perris retweeted
Google’s Security Engineers @arturjanc and @ddworken are discussing removing third-party cookies to eliminate entire classes of security bugs in the web platform @LocoMocoSec!
Watch the live stream: slideslive.com/39021592/loco…
Watching @LocoMocoSec and @ddworken is talking about how to permanently fix ClickJacking in the web platform, a term coined by @jeremiahg and @RSnake in 2008 and first discussed in 2002. Let's fix it all!
slideslive.com/39021592/loco…
Ron Perris retweeted
Mālama ka 'aina means "to take care of the land". We learned that, tried a ton of exotic fruits, and had a chocolate experience akin to a Napa Valley wine tasting @LydgateFarms. Highly recommended if you're in town for @LocoMocoSec! Henry even lets you use the machete.
Ron Perris retweeted
🎉 Louis Barrett, Lead Security Researcher @exaforceAI is speaking now!
Join us: slideslive.com/39021593/loco…
Ron Perris retweeted
Google just released Security Signals - a framework to collect and process aggregated security events.
