Advisory and training
Secure development training for engineering teams
Developers who understand how attacks work write safer code. I run hands-on workshops where your team sees how real vulnerabilities are exploited and learns to prevent them in the technologies they use.
Get in touch
Quoted individually, based on the scope.
What's included
- The most common web and API vulnerabilities, shown in practice.
- How each one is exploited and how to prevent it.
- Examples adapted to your stack.
- Remote or in-person sessions, in English or Spanish.
What you get
- Workshop materials for your team to keep.
- Practical exercises for after the session.
Who it's for
- Engineering teams that build products with sensitive data.
- Companies that want to raise their security baseline.
Not included
- A certification exam.
Frequently asked questions
Can the content be adapted to my team?
Yes. We define the topics and the level with you, based on your stack and what your team already knows.
Other services
- Secure code review A review of your code to find vulnerabilities before they reach production.
- Architecture review Threat modeling and design review, before the decisions are expensive to change.
- DevSecOps Security built into your development process: pipelines, dependencies and secrets.
- Web and API penetration testing Manual testing of web applications and APIs, the way an attacker would approach them.
Have a system to test or review? Send me the scope
Tell me what you need tested (applications, APIs or environments), by when, and any constraints, and I'll reply with the next steps. I work in English and Spanish.
hello@santiagopassafiume.comLooking for development? Websites, applications and backend projects go through RyuLabs.