Articles

Articles by the Bounce Security team

Knowing is half the battle

In this post, I highlight the crucial role of situational awareness in AppSec and how AppSec architects can leverage internal systems like ticketing, email, chat, and source control to gather vital information and enhance security practices. Discover practical tips to seamlessly integrate into development teams and boost your security posture.

When the "safe" is worse than you thought

Product Security continues to be hard. Sometimes even when you think you have the solution, reality bites back. In this post I will take you through how I had to eat humble pie after my previous blog post.

This post is part of a series:
Fun with SQL injection in Prisma ORM!
When the "safe" is bad and the "unsafe" is safe.

Product Security is hard. There are a huge number of different things you think about at the same time, while still being able to identify the most serious and urgent issues.

This post is part of a series:
Fun with SQL injection in Prisma ORM!
What’s the problem with Passkeys?

Passkeys are a great improvement on authentication security, but current implementation practices hold back their potential

No size fits all!

Why no size fits all and you need custom appsec testing