Alice and Bob Learn Application Security

“Tanya knows her stuff. She has a huge depth of experience and expertise in application security, DevSecOps, and cloud security. We can all learn a ton of stuff from Tanya, so you should read her book!”

-Dafydd Stuttard, best-selling co-author of The Web Application Hacker's Handbook, creator of Burp Suite

“I learned so much from this book!  Information security is truly everyone's job — this book is a fantastic overview of the vast knowledge needed by everyone, from developer, infrastructure, security professionals, and so much more.  Kudos to Ms. Janca for writing such an educational and practical primer.  I loved the realistic stories that frame real-world problems, spanning everything from design, migrating applications from problematic frameworks, mitigating admin risks, and things that every modern developer needs to know.”

-Gene Kim, bestselling author of The Unicorn Project, co-author of The Phoenix Project, DevOps Handbook, Accelerate

“Practical guidance for the modern era; Tanya does a great job of communicating current day thinking around AppSec in terms we can all relate to.”

-Troy Hunt, creator of  "Have I Been Pwned"