The story of how we got started — and why we believe security culture is built by engineers, not checklists.
For many years, we did lots of penetration testing across medium-sized startups to Fortune 500 enterprises. We realised our pen-test reports often did not solve these firms' security problems. The root cause wasn't the design or implementation of their programs — it was something else.
We listened to everyone from product owners to software testers, and found a big gap between what security people push for and what engineers care about. A wrong culture and approach to security meant bug reports felt like a burden, not an opportunity.
We turned real pen-test findings into a course built from developers' own programs. Not another course to turn every developer into a hacker — one that teaches defensive design patterns and security principles in the developer's language.
Developers used their learnings in day-to-day work and loved that security was implicitly taken care of by better-designed software. ❤️After almost every course, internal security teams heard about security bugs discovered and patched by their own engineers.
We want more companies to have similar success stories.
Our mission is to change the wrong approach (i.e. Whack-a-mole security patching) and culture (e.g. security is pain) to application security.
We've created a dedicated company to achieve our mission!
SecDim security team actively hunts for real vulnerabilities in the open source software the industry relies on, and responsibly discloses what it finds. See every the advisories we've reported.
Looking for a quote? Interested to know more about our enterprise offering? We're here to assist you with any type of question.
hello@secdim.comNeed help with your account, subscription, billing issues or have a technical question? Submit a support request
Support TicketLet's discuss your specific needs and requirements
