Resources Center

Take the Nucleaus Challenge and see if you can answer these questions

Dec. 10, 2019

As the World turns to code, the threat landscape increases and cyber security management becomes more complex. Code is created and distributed amongst different teams within the organization and key elements that indicate the health of code is not easily identified. Developers, CISOs, security committees, executives and boards of directors are struggling to come up with meaningful information to better control the organizations cyber security posture. Currently, there are too many platforms and tools that just add to the noise and prevent the achievement of business goals.

Is source code scanning required for PCI Compliance?

Jul. 31, 2019

Let's start with the basics...What is PCI and why is it important?

The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard for organizations that handle credit cards. The standard was created to increase controls around cardholder data to reduce fraud. Validation of compliance is performed annually or quarterly.

It is a PCI DSS requirement to have a secure development lifecycle. Requirements states:

Hold my Beer and Scan this! Why it is important in the new norm?

May. 13, 2019

Every aspect of our lives involves computers and the code that runs them so what does Democratizing application code scanning mean, why is it important, and what does it have to do with beer? Before we jump into the beer conversation, let’s discuss application security and the need to simplify the entire process for application code scanning.

What is OWASP Top10?

Apr. 8, 2019

OWASP, an international non-profit organization dedicated to web application security, stands for Open Web Application Security Project. OWASP is an open community dedicated to enabling the organization to develop, purchase and maintain application and APIs that can be trusted. One of its core principals is that all of their materials be freely available and easily accessible on their website. It is important to note that OWASP is not affiliated with any technology and or Company. They offer materials such as documentation, tools, videos and forums.

Code Scanning Poem

Feb. 4, 2019
The Nucleaus team isn't just creative at writing code, we can write poems too! Last week, we challenged our team to a poem-hackathon where we asked them to come up with a poem about code scanning.