Application Security Training for Developers

Overview

Rietta teaches developers how to include security in their everyday work. This is training for the people who build your software, not just for security professionals: your team learns to bring security considerations into every stage of the development process, so security is baked in rather than bolted on.

How It Works

Our hybrid format is the most affordable way to train a whole team, and it takes the least time away from shipping:

1. We develop your content. We build the course around your languages and frameworks, your industry and compliance requirements, and the issues your team has run into, starting from what we learn on the scoping call.
2. We record the presentation. Your developers study it at their own pace, on their own schedule. For a sample of the style, watch Practical Application Security for Developers, an hour-long lecture we pre-recorded for a hybrid class.
3. A 1 to 2 hour live workshop, remote. Your team brings its questions and works through exercises together with us, putting the course to work on your own situation.

Other Formats

When your team needs more live time, we offer two other formats, each costing more than hybrid:

• Remote live workshop: your whole group in a real-time workshop with us over Zoom, Google Meet, or a similar platform, with breakout sessions for group exercises.
• In person: we fly out to you for an on-site workshop with group breakout activities. This is the most expensive option.

Topics

Courses include, but are not limited to:

• Cybersecurity for Developers
• Threat Modeling
• Preventing a Data Breach Through Secure Software Development
• Ruby on Rails Security
• Docker Development
• CI/CD Pipeline and Code Review Processes

What Your Team Receives

• The course, developed and recorded for your team, to study at their own pace.
• The live workshop, in the format you choose.
• Quizzes and completion certificates your team can use toward contractual training obligations.

Experience

We teach threat modeling and secure software project management to teams at Fortune 500 firms, and we have worked with other training companies, including Pluralsight, to train developers working in their customers’ organizations. With our clients, we have built one-day workshops and four-day training courses, including an all-day threat modeling workshop we have delivered in person to technology clients in Silicon Valley.

Pricing

Pricing depends on your team’s size and the format you choose, and is negotiated for each engagement. The hybrid format starts at $3,000 for a small team. Remote live and in-person engagements cost more, and the scoping call is where we work out a quote that fits your team.

Free Resources

After the workshop, your team can keep using these free resources: the Video Learning Library of conference talks and explainers, The Rietta Glossary of cybersecurity and accessibility terms, and the Rietta on Security newsletter.