René's URL Explorer Experiment

Title: GitHub - fystack/developer-security-handbook: Your go-to guide to avoid getting rekt by hackers, step-by-step security playbook with threat models, checklists, and hardening recipes · GitHub

Open Graph Title: GitHub - fystack/developer-security-handbook: Your go-to guide to avoid getting rekt by hackers, step-by-step security playbook with threat models, checklists, and hardening recipes

X Title: GitHub - fystack/developer-security-handbook: Your go-to guide to avoid getting rekt by hackers, step-by-step security playbook with threat models, checklists, and hardening recipes

Description: Your go-to guide to avoid getting rekt by hackers, step-by-step security playbook with threat models, checklists, and hardening recipes - fystack/developer-security-handbook

Open Graph Description: Your go-to guide to avoid getting rekt by hackers, step-by-step security playbook with threat models, checklists, and hardening recipes - fystack/developer-security-handbook

X Description: Your go-to guide to avoid getting rekt by hackers, step-by-step security playbook with threat models, checklists, and hardening recipes - fystack/developer-security-handbook

Mail addresses
dev@company.com

Opengraph URL: https://github.com/fystack/developer-security-handbook

X: @github

direct link

Domain: github.com

route-pattern	/:user_id/:repository
route-controller	files
route-action	disambiguate
fetch-nonce	v2:5e635ff9-0d37-30fb-f4cf-010458db3115
current-catalog-service-hash	f3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-id	92D8:3B3FE4:121B79:1DA2C4:6A591BA0
html-safe-nonce	a642e73137408e0c69a901cf23ef254d1127384371b8383b641c3bfb12bc3023
visitor-payload	eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5MkQ4OjNCM0ZFNDoxMjFCNzk6MURBMkM0OjZBNTkxQkEwIiwidmlzaXRvcl9pZCI6IjU2MDU4NzQzMDgxNzY0ODUyODAiLCJyZWdpb25fZWRnZSI6Indlc3R1czIiLCJyZWdpb25fcmVuZGVyIjoid2VzdHVzMiJ9
visitor-hmac	fa1fa7a5f5c389b8d6877c5988f67681f80d14a3ed2e0a6158e9ccc6f97dcab7
hovercard-subject-tag	repository:990134570
github-keyboard-shortcuts	repository,copilot
google-site-verification	Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-url	https://collector.github.com/github/collect
analytics-location	//
fb:app_id	1401488693436528
apple-itunes-app	app-id=1477376905, app-argument=https://github.com/fystack/developer-security-handbook
twitter:image	https://opengraph.githubassets.com/3b27b7da0cf7e15cbccd9a845e016e438f504212a93181262b1c971307024241/fystack/developer-security-handbook
twitter:card	summary_large_image
og:image	https://opengraph.githubassets.com/3b27b7da0cf7e15cbccd9a845e016e438f504212a93181262b1c971307024241/fystack/developer-security-handbook
og:image:alt	Your go-to guide to avoid getting rekt by hackers, step-by-step security playbook with threat models, checklists, and hardening recipes - fystack/developer-security-handbook
og:image:width	1200
og:image:height	600
og:site_name	GitHub
og:type	object
hostname	github.com
expected-hostname	github.com
None	de7b53b927e5bfbf02672a5b2960bf82d1608d91c6d7888039c826ebf8d4ca76
turbo-cache-control	no-cache
go-import	github.com/fystack/developer-security-handbook git https://github.com/fystack/developer-security-handbook.git
octolytics-dimension-user_id	149689344
octolytics-dimension-user_login	fystack
octolytics-dimension-repository_id	990134570
octolytics-dimension-repository_nwo	fystack/developer-security-handbook
octolytics-dimension-repository_public	true
octolytics-dimension-repository_is_fork	false
octolytics-dimension-repository_network_root_id	990134570
octolytics-dimension-repository_network_root_nwo	fystack/developer-security-handbook
turbo-body-classes	logged-out env-production page-responsive
disable-turbo	false
browser-stats-url	https://api.github.com/_private/browser/stats
browser-errors-url	https://api.github.com/_private/browser/errors
release	020f8e5d3a42ae1a22d3f297198ccfca124edd1d
ui-target	full
theme-color	#1e2327
color-scheme	light dark

Links:

Skip to content	https://github.com/fystack/developer-security-handbook#start-of-content
	https://github.com/
Sign in	https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Ffystack%2Fdeveloper-security-handbook
GitHub CopilotWrite better code with AI	https://github.com/features/copilot
GitHub Copilot appDirect agents from issue to merge	https://github.com/features/ai/github-app
MCP RegistryNewIntegrate external tools	https://github.com/mcp
ActionsAutomate any workflow	https://github.com/features/actions
CodespacesInstant dev environments	https://github.com/features/codespaces
IssuesPlan and track work	https://github.com/features/issues
Code ReviewManage code changes	https://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilities	https://github.com/security/advanced-security
Code securitySecure your code as you build	https://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they start	https://github.com/security/advanced-security/secret-protection
Why GitHub	https://github.com/why-github
Documentation	https://docs.github.com
Blog	https://github.blog
Changelog	https://github.blog/changelog
Marketplace	https://github.com/marketplace
View all features	https://github.com/features
Enterprises	https://github.com/enterprise
Small and medium teams	https://github.com/team
Startups	https://github.com/enterprise/startups
Nonprofits	https://github.com/solutions/industry/nonprofits
App Modernization	https://github.com/solutions/use-case/app-modernization
DevSecOps	https://github.com/solutions/use-case/devsecops
DevOps	https://github.com/solutions/use-case/devops
CI/CD	https://github.com/solutions/use-case/ci-cd
View all use cases	https://github.com/solutions/use-case
Healthcare	https://github.com/solutions/industry/healthcare
Financial services	https://github.com/solutions/industry/financial-services
Manufacturing	https://github.com/solutions/industry/manufacturing
Government	https://github.com/solutions/industry/government
View all industries	https://github.com/solutions/industry
View all solutions	https://github.com/solutions
AI	https://github.com/resources/articles?topic=ai
Software Development	https://github.com/resources/articles?topic=software-development
DevOps	https://github.com/resources/articles?topic=devops
Security	https://github.com/resources/articles?topic=security
View all topics	https://github.com/resources/articles
Customer stories	https://github.com/customer-stories
Events & webinars	https://github.com/resources/events
Ebooks & reports	https://github.com/resources/whitepapers
Business insights	https://github.com/solutions/executive-insights
GitHub Skills	https://skills.github.com
Documentation	https://docs.github.com
Customer support	https://support.github.com
Community forum	https://github.com/orgs/community/discussions
Trust center	https://github.com/trust-center
Partners	https://github.com/partners
View all resources	https://github.com/resources
GitHub SponsorsFund open source developers	https://github.com/open-source/sponsors
Security Lab	https://securitylab.github.com
Maintainer Community	https://maintainers.github.com
Accelerator	https://github.com/open-source/accelerator
GitHub Stars	https://stars.github.com
Archive Program	https://archiveprogram.github.com
Topics	https://github.com/topics
Trending	https://github.com/trending
Collections	https://github.com/collections
Enterprise platformAI-powered developer platform	https://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security features	https://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI features	https://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 support	https://github.com/enterprise/premium-support
Pricing	https://github.com/pricing
Search syntax tips	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentation	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in	https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Ffystack%2Fdeveloper-security-handbook
Sign up	https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=fystack%2Fdeveloper-security-handbook
Reload	https://github.com/fystack/developer-security-handbook
Reload	https://github.com/fystack/developer-security-handbook
Reload	https://github.com/fystack/developer-security-handbook
Please reload this page	https://github.com/fystack/developer-security-handbook
fystack	https://github.com/fystack
developer-security-handbook	https://github.com/fystack/developer-security-handbook
Notifications	https://github.com/login?return_to=%2Ffystack%2Fdeveloper-security-handbook
Fork 19	https://github.com/login?return_to=%2Ffystack%2Fdeveloper-security-handbook
Star 88	https://github.com/login?return_to=%2Ffystack%2Fdeveloper-security-handbook
Code	https://github.com/fystack/developer-security-handbook
Issues 0	https://github.com/fystack/developer-security-handbook/issues
Pull requests 0	https://github.com/fystack/developer-security-handbook/pulls
Actions	https://github.com/fystack/developer-security-handbook/actions
Projects	https://github.com/fystack/developer-security-handbook/projects
Security and quality 0	https://github.com/fystack/developer-security-handbook/security
Insights	https://github.com/fystack/developer-security-handbook/pulse
Code	https://github.com/fystack/developer-security-handbook
Issues	https://github.com/fystack/developer-security-handbook/issues
Pull requests	https://github.com/fystack/developer-security-handbook/pulls
Actions	https://github.com/fystack/developer-security-handbook/actions
Projects	https://github.com/fystack/developer-security-handbook/projects
Security and quality	https://github.com/fystack/developer-security-handbook/security
Insights	https://github.com/fystack/developer-security-handbook/pulse
	https://github.com/fystack/developer-security-handbook
Branches	https://github.com/fystack/developer-security-handbook/branches
Tags	https://github.com/fystack/developer-security-handbook/tags
	https://github.com/fystack/developer-security-handbook/branches
	https://github.com/fystack/developer-security-handbook/tags
9 Commits	https://github.com/fystack/developer-security-handbook/commits/main/
	https://github.com/fystack/developer-security-handbook/commits/main/
README.md	https://github.com/fystack/developer-security-handbook/blob/main/README.md
README.md	https://github.com/fystack/developer-security-handbook/blob/main/README.md
github_yubikey.webp	https://github.com/fystack/developer-security-handbook/blob/main/github_yubikey.webp
github_yubikey.webp	https://github.com/fystack/developer-security-handbook/blob/main/github_yubikey.webp
image-1.png	https://github.com/fystack/developer-security-handbook/blob/main/image-1.png
image-1.png	https://github.com/fystack/developer-security-handbook/blob/main/image-1.png
image-10.png	https://github.com/fystack/developer-security-handbook/blob/main/image-10.png
image-10.png	https://github.com/fystack/developer-security-handbook/blob/main/image-10.png
image-11.png	https://github.com/fystack/developer-security-handbook/blob/main/image-11.png
image-11.png	https://github.com/fystack/developer-security-handbook/blob/main/image-11.png
image-2.png	https://github.com/fystack/developer-security-handbook/blob/main/image-2.png
image-2.png	https://github.com/fystack/developer-security-handbook/blob/main/image-2.png
image-3.png	https://github.com/fystack/developer-security-handbook/blob/main/image-3.png
image-3.png	https://github.com/fystack/developer-security-handbook/blob/main/image-3.png
image-4.png	https://github.com/fystack/developer-security-handbook/blob/main/image-4.png
image-4.png	https://github.com/fystack/developer-security-handbook/blob/main/image-4.png
image-5.png	https://github.com/fystack/developer-security-handbook/blob/main/image-5.png
image-5.png	https://github.com/fystack/developer-security-handbook/blob/main/image-5.png
image-6.png	https://github.com/fystack/developer-security-handbook/blob/main/image-6.png
image-6.png	https://github.com/fystack/developer-security-handbook/blob/main/image-6.png
image-7.png	https://github.com/fystack/developer-security-handbook/blob/main/image-7.png
image-7.png	https://github.com/fystack/developer-security-handbook/blob/main/image-7.png
image-8.png	https://github.com/fystack/developer-security-handbook/blob/main/image-8.png
image-8.png	https://github.com/fystack/developer-security-handbook/blob/main/image-8.png
image-9.png	https://github.com/fystack/developer-security-handbook/blob/main/image-9.png
image-9.png	https://github.com/fystack/developer-security-handbook/blob/main/image-9.png
image.png	https://github.com/fystack/developer-security-handbook/blob/main/image.png
image.png	https://github.com/fystack/developer-security-handbook/blob/main/image.png
pepe-handbook.jpg	https://github.com/fystack/developer-security-handbook/blob/main/pepe-handbook.jpg
pepe-handbook.jpg	https://github.com/fystack/developer-security-handbook/blob/main/pepe-handbook.jpg
pepe.jpg	https://github.com/fystack/developer-security-handbook/blob/main/pepe.jpg
pepe.jpg	https://github.com/fystack/developer-security-handbook/blob/main/pepe.jpg
README	https://github.com/fystack/developer-security-handbook
	https://github.com/fystack/developer-security-handbook#security-handbook-for-developers
	https://github.com/fystack/developer-security-handbook/blob/main/pepe.jpg
Security handbook for developers	https://github.com/fystack/developer-security-handbook#security-handbook-for-developers
Part I — Developer Identity & Workstation	https://github.com/fystack/developer-security-handbook#part-i--developer-identity--workstation
1. SSH Keys: Hackers' Easiest Target & Prime Hotspots	https://github.com/fystack/developer-security-handbook#1-ssh-keys-hackers-easiest-target--prime-hotspots
🔐 Maximum Security: Store Your SSH Key on a YubiKey (FIDO2)	https://github.com/fystack/developer-security-handbook#-maximum-security-store-your-ssh-key-on-a-yubikey-fido2
2. Don't Let Hackers Impersonate You, Lock Down Commits with GPG	https://github.com/fystack/developer-security-handbook#2-dont-let-hackers-impersonate-you-lock-down-commits-with-gpg
3. Enforce Strong Password Practices & Secure Credential Management	https://github.com/fystack/developer-security-handbook#3-enforce-strong-password-practices--secure-credential-management
4. Secrets Aren’t for Sharing, Not Even with Your Team	https://github.com/fystack/developer-security-handbook#4-secrets-arent-for-sharing-not-even-with-your-team
5. Don't Store Secrets for Development in .env Files – Use a Secure Secret Vault	https://github.com/fystack/developer-security-handbook#5-dont-store-secrets-for-development-in-env-files--use-a-secure-secret-vault
6. Secure Firewall Policy for Developer Desktops	https://github.com/fystack/developer-security-handbook#6-secure-firewall-policy-for-developer-desktops
7. Monitor for Compromised Developer Devices	https://github.com/fystack/developer-security-handbook#7-monitor-for-compromised-developer-devices
Part II — Supply Chain & Dependencies	https://github.com/fystack/developer-security-handbook#part-ii--supply-chain--dependencies
8. No Blind Installs: Treat Each Package Like a Potential Trojan	https://github.com/fystack/developer-security-handbook#8-no-blind-installs-treat-each-package-like-a-potential-trojan
9. 🐳 Don't Let Docker Be Your Trojan Horse: Lock Down Your Containers	https://github.com/fystack/developer-security-handbook#9--dont-let-docker-be-your-trojan-horse-lock-down-your-containers
10. Verify Website URLs Carefully Before Downloading Anything	https://github.com/fystack/developer-security-handbook#10-verify-website-urls-carefully-before-downloading-anything
11. Weaponized PDFs & File Traps: Don't Get Baited	https://github.com/fystack/developer-security-handbook#11-weaponized-pdfs--file-traps-dont-get-baited
Part III — DevSecOps & Shift-Left	https://github.com/fystack/developer-security-handbook#part-iii--devsecops--shift-left
12. Secure Your CI/CD Pipelines: Attackers Love Automated Trust	https://github.com/fystack/developer-security-handbook#12-secure-your-cicd-pipelines-attackers-love-automated-trust
13. Secure Coding: Write Code That Resists Attacks	https://github.com/fystack/developer-security-handbook#13-secure-coding-write-code-that-resists-attacks
14. Security Testing: Shift Left and Catch Issues Early	https://github.com/fystack/developer-security-handbook#14-security-testing-shift-left-and-catch-issues-early
Part IV — Access & Infrastructure	https://github.com/fystack/developer-security-handbook#part-iv--access--infrastructure
15. VPN connection is required to access critical resource	https://github.com/fystack/developer-security-handbook#15-vpn-connection-is-required-to-access-critical-resource
16. Implement Just-In-Time (JIT) Privileges	https://github.com/fystack/developer-security-handbook#16-implement-just-in-time-jit-privileges
17. Cloud Security: Shared Responsibility Model	https://github.com/fystack/developer-security-handbook#17-cloud-security-shared-responsibility-model
Part V — Detect & Respond	https://github.com/fystack/developer-security-handbook#part-v--detect--respond
18. Security Logging & Alerting: Detecting Threats Before They Strike	https://github.com/fystack/developer-security-handbook#18-security-logging--alerting-detecting-threats-before-they-strike
19. Incident Response: Be Prepared for the Worst	https://github.com/fystack/developer-security-handbook#19-incident-response-be-prepared-for-the-worst
	https://github.com/fystack/developer-security-handbook#part-i--developer-identity--workstation
	https://github.com/fystack/developer-security-handbook#1-ssh-keys-hackers-easiest-target--prime-hotspots
	https://github.com/fystack/developer-security-handbook/blob/main/image-1.png
https://www.ssh.com/blog/ssh-key-scan-attack-honeypot)—that	https://www.ssh.com/blog/ssh-key-scan-attack-honeypot)%E2%80%94that
	https://github.com/fystack/developer-security-handbook#-maximum-security-store-your-ssh-key-on-a-yubikey-fido2
	https://github.com/fystack/developer-security-handbook/blob/main/github_yubikey.webp
YubiKey + SSH + Git: Super-Secure Your Development Workflow	https://medium.com/@harrishcluo/yubikey-ssh-git-super-secure-your-development-workflow-2-2-1899379fb882
	https://github.com/fystack/developer-security-handbook#2-dont-let-hackers-impersonate-you-lock-down-commits-with-gpg
	https://github.com/fystack/developer-security-handbook/blob/main/image-2.png
	https://github.com/fystack/developer-security-handbook/blob/main/image-4.png
	https://github.com/fystack/developer-security-handbook/blob/main/image-3.png
	https://github.com/fystack/developer-security-handbook#3-enforce-strong-password-practices--secure-credential-management
	https://github.com/fystack/developer-security-handbook/blob/main/image-11.png
	https://github.com/fystack/developer-security-handbook#best-practices-for-strong-password-security
	https://github.com/fystack/developer-security-handbook#4-secrets-arent-for-sharing-not-even-with-your-team
	https://github.com/fystack/developer-security-handbook#5-dont-store-secrets-for-development-in-env-files--use-a-secure-secret-vault
	https://github.com/fystack/developer-security-handbook#6-secure-firewall-policy-for-developer-desktops
https://ostechnix.com/opensnitch-application-level-firewall-for-linux/	https://ostechnix.com/opensnitch-application-level-firewall-for-linux/
https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-with-ufw-on-ubuntu	https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-with-ufw-on-ubuntu
	https://github.com/fystack/developer-security-handbook#7-monitor-for-compromised-developer-devices
	https://github.com/fystack/developer-security-handbook#part-ii--supply-chain--dependencies
	https://github.com/fystack/developer-security-handbook#8-no-blind-installs-treat-each-package-like-a-potential-trojan
	https://github.com/fystack/developer-security-handbook/blob/main/image-5.png
	https://github.com/fystack/developer-security-handbook#real-world-supply-chain-ambushes
Malicious NPM Packages Target Ethereum Developers' Private Keys	https://www.bleepingcomputer.com/news/security/malicious-npm-packages-target-ethereum-developers-private-keys/
Hackers Deploy Malicious npm Packages Targeting Crypto Users	https://thehackernews.com/2025/01/hackers-deploy-malicious-npm-packages.html
Ripple's xrpl.js npm Package Backdoored with Malicious Code	https://thehackernews.com/2025/04/ripples-xrpljs-npm-package-backdoored.html
Malicious Python Package Found Stealing Ethereum Private Keys	https://www.scworld.com/brief/malicious-python-package-found-stealing-ethereum-private-keys
TON Wallet Security Threat: Malicious NPM Package Steals Cryptocurrency Wallet Keys	https://socket.dev/blog/ton-wallet-security-threat-malicious-npm-package-steals-cryptocurrency-wallet-keys
The trojanized Golang BoltDB repo went undetected for over three years	https://www.theregister.com/2025/02/04/golang_supply_chain_attack/?utm_source=chatgpt.com
	https://github.com/fystack/developer-security-handbook#common-attack-patterns
	https://github.com/fystack/developer-security-handbook/blob/main/image-6.png
	https://github.com/fystack/developer-security-handbook#9--dont-let-docker-be-your-trojan-horse-lock-down-your-containers
Tesla Kubernetes Hack (2018)	https://arstechnica.com/information-technology/2018/02/tesla-cloud-resources-are-hacked-to-run-cryptocurrency-mining-malware/
Docker Hub Data Breach (2019)	https://thehackernews.com/2019/04/docker-hub-data-breach.html
TeamTNT Docker API Attacks (2020–2021)	https://www.bleepingcomputer.com/news/security/teamtnt-hackers-target-your-poorly-configured-docker-servers/
Kinsing Malware on Docker (2020)	https://www.aquasec.com/blog/threat-alert-kinsing-malware-container-vulnerability/
Graboid Docker Worm (2019)	https://unit42.paloaltonetworks.com/graboid-first-ever-cryptojacking-worm-found-in-images-on-docker-hub/
SaltStack RCE via Docker (2020)	https://www.immersivelabs.com/resources/blog/hackers-are-currently-attacking-vulnerable-saltstack-systems/
Dero Miner Targeting Docker (2025)	https://www.techradar.com/pro/security/misconfigured-docker-instances-are-being-hacked-to-mine-cryptocurrency
	https://github.com/fystack/developer-security-handbook#best-practices-for-secure-docker-usage
https://github.com/aquasecurity/trivy	https://github.com/aquasecurity/trivy
https://github.com/goodwithtech/dockle	https://github.com/goodwithtech/dockle
Cosign	https://github.com/sigstore/cosign
Cilium Tetragon	https://github.com/cilium/tetragon
	https://github.com/fystack/developer-security-handbook#10-verify-website-urls-carefully-before-downloading-anything
	https://github.com/fystack/developer-security-handbook/blob/main/image-7.png
targeted by sophisticated phishing campaigns	https://www.bleepingcomputer.com/news/security/fake-homebrew-google-ads-target-mac-users-with-malware/
virustotal.com	https://virustotal.com
	https://github.com/fystack/developer-security-handbook#11-weaponized-pdfs--file-traps-dont-get-baited
	https://github.com/fystack/developer-security-handbook/blob/main/image-9.png
https://www.techtarget.com/searchmobilecomputing/definition/application-sandboxing	https://www.techtarget.com/searchmobilecomputing/definition/application-sandboxing
	https://github.com/fystack/developer-security-handbook/blob/main/image-8.png
	https://github.com/fystack/developer-security-handbook/blob/main/image-10.png
	https://github.com/fystack/developer-security-handbook#part-iii--devsecops--shift-left
	https://github.com/fystack/developer-security-handbook#12-secure-your-cicd-pipelines-attackers-love-automated-trust
SolarWinds Orion (2020)	https://www.reversinglabs.com/blog/ci/cd-security-breaches-update-software-security-approach
Codecov (2021)	https://about.codecov.io/security-update/
CircleCI (2023)	https://circleci.com/blog/january-4-2023-security-alert/
Travis CI (2022)	https://www.trendmicro.com/en_us/research/22/j/travis-ci-exposed-secrets-in-public-logs.html
PHP Git Server (2021)	https://www.bleepingcomputer.com/news/security/php-official-git-repository-hacked-code-backdoored/
SolarMarker via Jenkins (2022)	https://www.reversinglabs.com/blog/ci/cd-security-breaches-update-software-security-approach
Codecov-like Bash Uploader Imitation (2021)	https://www.reversinglabs.com/blog/ci/cd-security-breaches-update-software-security-approach
	https://github.com/fystack/developer-security-handbook#13-secure-coding-write-code-that-resists-attacks
	https://github.com/fystack/developer-security-handbook#14-security-testing-shift-left-and-catch-issues-early
OWASP Testing Guide	https://owasp.org/www-project-web-security-testing-guide/
NIST Secure SDLC Framework	https://csrc.nist.gov/pubs/sp/800/218/final
GitHub Advanced Security	https://docs.github.com/en/code-security
Microsoft Security Development Lifecycle	https://www.microsoft.com/en-us/securityengineering/sdl
OWASP ZAP Tutorials	https://www.zaproxy.org/docs/
	https://github.com/fystack/developer-security-handbook#part-iv--access--infrastructure
	https://github.com/fystack/developer-security-handbook#15-vpn-connection-is-required-to-access-critical-resource
https://github.com/ukncsc/secure-development-and-deployment	https://github.com/ukncsc/secure-development-and-deployment
	https://github.com/fystack/developer-security-handbook#16-implement-just-in-time-jit-privileges
	https://github.com/fystack/developer-security-handbook#17-cloud-security-shared-responsibility-model
AWS IAM Best Practices	https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
Google Cloud IAM Overview	https://cloud.google.com/iam/docs
Azure RBAC Docs	https://learn.microsoft.com/en-us/azure/role-based-access-control/overview
AWS VPC Security Best Practices	https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Security.html
Azure Networking Security	https://learn.microsoft.com/en-us/azure/security/fundamentals/network-best-practices
GCP VPC Best Practices	https://cloud.google.com/vpc/docs/best-practices
AWS Encryption Options	https://docs.aws.amazon.com/whitepapers/latest/introduction-aws-security/encryption.html
Azure Data Encryption Guide	https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview
GCP Data Encryption Documentation	https://cloud.google.com/security/encryption-at-rest
AWS CloudTrail Setup	https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
Google Cloud Operations Suite (formerly Stackdriver)	https://cloud.google.com/products/operations
Azure Monitor Docs	https://learn.microsoft.com/en-us/azure/azure-monitor/overview
Checkov	https://github.com/bridgecrewio/checkov
tfsec	https://github.com/aquasecurity/tfsec
Checkov Documentation	https://www.checkov.io/
IaC Security Guide by Bridgecrew	https://www.bridgecrew.cloud/iac-security/
Terraform Security Best Practices	https://developer.hashicorp.com/terraform/tutorials/security/overview
	https://github.com/fystack/developer-security-handbook#part-v--detect--respond
	https://github.com/fystack/developer-security-handbook#18-security-logging--alerting-detecting-threats-before-they-strike
NIST SP 800-92: Guide to Computer Security Log Management	https://csrc.nist.gov/publications/detail/sp/800-92/final
Introduction to SIEM	https://www.rapid7.com/fundamentals/siem/
Elastic SIEM Overview	https://www.elastic.co/what-is/siem
Wazuh SIEM + XDR Documentation	https://documentation.wazuh.com/current/index.html
Graylog Log Management Guide	https://go2.graylog.org/rs/graylog/images/Graylog_Security_Log_Management_Best_Practices.pdf
Falco (CNCF)	https://falco.org/
Osquery	https://osquery.io/
MITRE ATT&CK Framework	https://attack.mitre.org/
	https://github.com/fystack/developer-security-handbook#19-incident-response-be-prepared-for-the-worst
NIST SP 800-61r2: Computer Security Incident Handling Guide	https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final
SANS Incident Handler's Handbook	https://www.sans.org/white-papers/1741/
MITRE ATT&CK Framework	https://attack.mitre.org/
AWS Incident Response Guide	https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-ir.html
Google Cloud Incident Response Guide	https://cloud.google.com/security/incident-response
Microsoft 365 IR Framework	https://learn.microsoft.com/en-us/security/compass/incident-response-overview
GRR Rapid Response (remote forensics)	https://github.com/google/grr
TheHive + Cortex (collaborative incident handling)	https://thehive-project.org/
Zeek (network traffic analysis)	https://zeek.org/
fystack.io	https://fystack.io
Readme	https://github.com/fystack/developer-security-handbook#readme-ov-file
Please reload this page	https://github.com/fystack/developer-security-handbook
Activity	https://github.com/fystack/developer-security-handbook/activity
Custom properties	https://github.com/fystack/developer-security-handbook/custom-properties
19 forks	https://github.com/fystack/developer-security-handbook/forks
Report repository	https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Ffystack%2Fdeveloper-security-handbook&report=fystack+%28user%29
Releases	https://github.com/fystack/developer-security-handbook/releases
Packages 0	https://github.com/orgs/fystack/packages?repo_name=developer-security-handbook
Please reload this page	https://github.com/fystack/developer-security-handbook
Contributors	https://github.com/fystack/developer-security-handbook/graphs/contributors
Please reload this page	https://github.com/fystack/developer-security-handbook
	https://github.com
Terms	https://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacy	https://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Security	https://github.com/security
Status	https://www.githubstatus.com/
Community	https://github.community/
Docs	https://docs.github.com/
Contact	https://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.