Secure Code Warrior

11/11/2026

Are your AI security controls starting early enough?

Recent incidents involving autonomous AI agents have exposed a troubling reality: Even the most advanced AI systems can operate outside established security boundaries, raising serious questions about enterprise visibility and control.

The challenge? Monitoring AI at the model level may already be one step too late.

In his latest Unite AI article, Secure Code Warrior's CTO explains why organizations need to rethink AI governance and build security, visibility, and oversight directly into the SDLC:

The Hugging Face breach and similar incidents have sent chills through the industry, but organizations should focus on the SDLC, not the AI model layer. The Hugging Face breach in July, carried out by OpenAI agents, foll...

10/11/2026

We had a blast in Dallas!

We were proud to sponsor GPSec Dallas with GuidePoint Security and loved connecting with security leaders on what it takes to adopt AI securely.

The takeaway: AI development is moving fast, and visibility is the starting point. You can't govern what you can't see.

Thanks to everyone who visited our table and to Nick and Larry for a great day on the ground!

06/11/2026

Congratulations to Secure Code Warrior Co-Founders Pieter Danhieux and Fatemah Beydoun on being named joint recipients of the 2026 NSW Pearcey Entrepreneur of the Year Award! This recognition celebrates their visionary leadership, innovation, and impact on Australia's technology industry. 👏

What began in Sydney in 2015 with a vision to transform how developers approach software security has grown into a global platform helping organizations build a stronger culture of secure coding.

🌏 Today, Secure Code Warrior supports more than 400,000 developers across 600 business customers worldwide, continuing to advance secure software development in the age of AI.

Read more about their journey and this exciting achievement: https://ow.ly/1yHJ5104xNM

The Pearcey Foundation today announced Pieter Danhieux and Fatemah Beydoun, co-founders of Secure Code Warrior, as joint recipients of the 2026 NSW Pearcey Entrepreneur of the Year Award. The award was presented at an event in Sydney tonight by Laura O'Reilly OAM, who received the award in 2021.

04/11/2026

Two perspectives, one problem: securing software as AI agents take on more of the coding.
Join us November 18 for a session with:

🔹 Kawin Boonyapredee, CISO Advisory at KnowBe4 — on how the engineer's role is evolving from writing code to directing it, and what that shift means for security and engineering leaders
🔹 Pieter Danhieux, CEO & Co-Founder of Secure Code Warrior — sharing findings from the SCW AI Trust Index, a benchmark of how AI coding models handle security, including how to spot AI and MCP influence in your pipeline

Secure Code Warrior and KnowBe4 partnered earlier this year to bring secure coding content into KnowBe4's training library — this session builds on that partnership.

Register: https://ow.ly/xKJe5103VNi

03/11/2026

That's a wrap on Cybermon 2026!

Four Cybermon. Four weeks. One global community. What a battle!

🌎 74 countries represented
⚡ 42,000+ activities completed
🏅 19,000+ badges earned
🏆 2,000+ Cyberheroes crowned
👑 880+ Cyberhero Primes conquered every Prime Boss

Whether you claimed Cyberhero Prime, earned a few badges, or are already planning your strategy for next year — thank you for playing!

We hope you had a blast. See you in 2027!

Built by AI. Secured by You.

03/11/2026

Thank you, OWASP LASCON 2026! 🤠

Two days in Austin, and the conversations at Booth 7 were a reminder of why we love this community. Thank you to everyone who stopped by, and to the OWASP Austin team and fellow sponsors for putting on a great conference.

What we kept coming back to: secure software starts with developers. When teams build real secure-coding skills through hands-on learning, they stop AI software risk at the source, before it ever reaches production.

If we missed you at the booth, we’d still love to connect. Drop us a message and let’s talk!

31/10/2026

As organizations race to embrace AI-driven development, many are overlooking a critical factor: Understanding where they are in their AI journey, and whether their security practices are ready for what's next.

With AI agents taking on increasingly autonomous roles, the risks are evolving just as quickly as the technology itself.

In this Security Week article, Secure Code Warrior's CTO offers his perspective on why AI security isn't about moving faster. It's about building the right foundation of governance, developer skills, and oversight at every stage of AI adoption.

Read it here:

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.

29/10/2026

🚨 PHP2Shell is making headlines and exposing a troubling reality: The window to patch vulnerabilities is shrinking from days to hours.

As AI accelerates exploitation, traditional patching timelines are no longer enough. So, how can organizations stay ahead?

This blog breaks down the PHP2Shell incident, its implications for software security, and what developers and security teams can do to reduce risk.

Plus, put your skills to the test with a FREE, interactive PHP2Shell mission that anyone can play. 🎮

Don't just read about the threat. Learn how to defend against it: https://ow.ly/LNuZ510257J

PHP2Shell: how AI shrank the patch window from days to hours, and what security teams should rethink about old bugs and technical debt.

28/10/2026

The final Cybermon has arrived.

Meet Nulltinea: The Lure.

Old code, forgotten states and exposed secrets — it follows what looks trustworthy straight to what isn't.

This final challenge brings together insufficiently protected credentials, stored XSS and cross-site request forgery as the battle reaches its end.

One final monster. One final boss mission.

Defeat Nulltinea and finish your run for Cyberhero — or conquer every Prime mission and become Cyberhero Prime.

Watch the full walkthrough on YouTube: https://ow.ly/HJTr5101RNq.

28/10/2026

AI agents are already writing production code, and governance hasn't caught up.

KnowBe4 and Secure Code Warrior are teaming up for a live session on what that means for your pipeline:
🔹 KnowBe4 CISO Advisory Kawin Boonyapredee on how the engineer's job is shifting from writing code to directing it and why guardrails, specs, and verification are becoming core engineering skills.
🔹 SCW CEO & Co-Founder Pieter Danhieux on results from the SCW AI Trust Index, a benchmark of how often leading AI coding models generate vulnerable code, including how to detect AI and MCP influence in your pipeline.

Whether you're on the security or engineering side, this session is built to help you make more secure, cost-effective choices as AI tooling becomes standard in your stack.

Register: https://ow.ly/2qRF5101w7l