Defensive Programming Pins and Buttons

This design reminds to the developer the importance of using defensive copy instead of clone. It will reduce the risk of data compromise.

A cool and funny way to remind one of the OWASP guidelines, the A2:2021. This design will guide your developers to follow the best practices for cryptographic failures.

A cool and funny way to remind one of the OWASP guidelines, the A1:2021. This design will guide your developers to follow the best practices for broken access control.

When dealing with multithreading applications, it is important to make a copy of the input mutable object before processing it to avoid race conditions.

This should be the input validation steps that the code must do to avoid processing harmful untrusted data.

Threat modeling should be a mainstream activity for every current and new designs to better understand which could be the threats and which could be the security measures to mitigate the risk.

If the web application is not properly implemented and it doesn't performs input validation correctly on login, then it could be bypassed by sql injection.

A design made for providing guidance to CSRF attack prevention. If it is not prevented adequately, it may leave attackers to trigger undesired actions from victims' browser like performing inadvertent transactions on your website.

Never forget to handle a potential exception thrower code to avoid any undesired web application status. Run the code within a try and process the error on the catch section.

A shield design of the input validation steps that developers should do in the methods or functions that manipulates untrusted data. This is one of the best practice of OWASP for secure coding.

This is a cool and funny design to certify that the code is free of any possible injection threats following the best practices like OWASP or CWE.

APP Security Engineer is a Cool design of this role tittle. If you are this kind of cybersecurity professional, your duty is to reduce the risk as much as possible in code and dependencies. Also you'll enact activities like threat modelling, malware scanning, secure coding practices and correct secret management. This is a design version with black background.

APP Security Engineer is a Cool design of this role tittle. If you are this kind of cybersecurity professional, your duty is to reduce the risk as much as possible in code and dependencies. Also you'll enact activities like threat modelling, malware scanning, secure coding practices and correct secret management.

A design about the the common weakness enumeration 79 represented in an iconic way. Good for secure coding guideline and awareness to avoid being vulnerable to XSS attacks.

HTTPOnly flag for cookies should be a must. This avoids other unwanted usages of cookies from your browser like scripts and only restricts its usage for HTTP.

Normally, any authentication through a website is done through HTTP POST method since a form is needed with login information. This could minimise the risk of disclosing the credentials when your browser stores the URL in plan text or even being written in logs on the server side.

This is one of the best practice which is a must when developing any web server that provides cookies. With the secure flag assigned on cookies, it will only be transferred through HTTPS.

Developers are under great pressure with aggressive delivering dates but, one of the most important things that they shouldn't overlook, is to applying input validation in the functions or methods.

This is a reminder for developers to replace any print used for debugging purposes with logger to write them in files.

Insecure deserialisation could lead to remote code execution if no proper validation is done previously.

A design about the the common weakness enumeration 78 represented with an icon. This is a good way to concern developers to sanitise any inputs before using them to run any OS command.

A funny design to concern developers that the usage of eval() to process or parse untrusted data could let attackers to inject code to run.

A design version with white letters and black background, This is a reminder for developers to replace any print used for debugging purposes with logger to write them in files.

A design about the the common weakness enumeration 20 also known as improper input validation. If user input is not properly escaped, sanitised and validated then the attackers can perform DoS, RCE or even tamper the information.

A funny design of a samoyed reminding the importance of doing input validation before processing any user provided data.