Links

• [tool] threatcl/threatcl: Documenting your Threat Models with HCL

• [tool] aquasecurity/chain-bench: An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

• [video] Webinar: Rapid Threat Modeling with GenAI and LLMs

• [artigo] Product Security Plans: What They Are and Why They Matter

• [video] Secure LLM Architecture - Testing LLM Guard

• [wiki] Risk Based Prioritization

• [tool] sonatype SBOM manager

• [artigo] Jit | The Essential Components of a DevSecOps Pipeline

Vagas

• Loggi - Senior Cybersecurity Manager (App Sec & SOC)

• Compass UOL - Security Champion | Senior