https://github.com/cossacklabs/security-guides

Tips, tricks, useful links on building and breaking secure systems
https://github.com/cossacklabs/security-guides

appsec hardware risks security ssdlc

Last synced: 5 months ago
JSON representation

Tips, tricks, useful links on building and breaking secure systems

• Host: GitHub
• URL: https://github.com/cossacklabs/security-guides
• Owner: cossacklabs
• License: apache-2.0
• Created: 2024-12-10T21:26:59.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2025-09-21T22:58:21.000Z (10 months ago)
• Last Synced: 2025-09-22T00:23:59.928Z (10 months ago)
• Topics: appsec, hardware, risks, security, ssdlc
• Homepage:
• Size: 1.39 MB
• Stars: 2
• Watchers: 7
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
## Introduction 

These guides are short lists of concepts and links that we hand out at our private workshops and to our customers sometimes. They could have wider usability and applicability, that's why we chose to put them out publicly.

**Disclaimer!**  

These guides are based on publicly available information and professional experience. They do not include proprietary information, trade secrets, or unique technical "know-hows." More often than not, defensive security is about applying common knowledge efficiently, than access to esoteric techniques. Because [Kerckhoffs's principle](https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle) has much wider applicability than cryptography.

The recommendations provided are intended to offer general guidance and support informed decision-making. Please use the information responsibly!

## Building information security program

[Building information security program](building-infosec-program.md)

## Product security tips 

[Product security tips ](product-security-tips.md)

## Contacts

If you want to ask a technical question, report a bug or suggest a feature, feel free to start a [discussion here on GitHub](https://github.com/cossacklabs/security-guides/discussions). Otherwise, write us an email [dev@cossacklabs.com](dev@cossacklabs.com).

[![Blog](https://img.shields.io/badge/blog-cossacklabs.com-orange.svg)](https://cossacklabs.com/) [![LinkedIn CossackLabs](https://img.shields.io/badge/linkedin-%40cossacklabs-blue.svg)](https://www.linkedin.com/company/cossack-labs/) [![Twitter CossackLabs](https://img.shields.io/badge/twitter-cossacklabs-black.svg)](http://twitter.com/cossacklabs) [![Dev.to CossackLabs](https://img.shields.io/badge/dev.to-%40cossacklabs-lightgrey.svg)](https://dev.to/@cossacklabs/)