AppSec Terrain Check
Who this is for
You are an AppSec lead tired of being the glue that holds everything together. You want your time back to improve the system, not just keep it running. That's what you signed up for in the first place.
What it is
A diagnostic that analyzes how your isolated AppSec measures impact your SDLC as one system. You see how official and actual responsibility differ. You learn how to design your system for resilience.
The deal
You help to finalize the AppSec Owner's Manual. You get the full Standard Terrain Check at founding terms. You give honest feedback so it becomes a valuable tool for your future AppSec decisions.
Become a Founding Client
The Terrain Check is new. It is developed from over ten years experience combined in software development and later building AppSec systems by understanding what people need and designing something that helps them build secure software. That experience created an implicit model for AppSec as a decentralized system based on shared responsibility. The Terrain Check turns that model into a tool that helps you understand and intentionally design your own AppSec program as a resilient system.
There are exactly 2 founding client spots available.
Standard Edition: 19,500 USD
As a founding client, you work directly with me to shape the first AppSec Owner's Manual. You get the full Standard Terrain Check. Plus: two follow-up sparring calls after delivery. When your first big decisions come up and you need to use the manual, I help you talk it through. This is included because I want to see how you use it and what you still need.
How long does it take?
Weeks, not months. Realistically, we should be done in two to three months. It depends on how quickly we can schedule the interviews and how fast you give feedback.
Become a Founding Client
The Terrain Check is new. It is developed from over ten years experience combined in software development and later building AppSec systems by understanding what people need and designing something that helps them build secure software. That experience created an implicit model for AppSec as a decentralized system based on shared responsibility. The Terrain Check turns that model into a tool that helps you understand and intentionally design your own AppSec program as a resilient system.
There are exactly 2 founding client spots available.
Standard Edition: 19,500 USD
As a founding client, you work directly with me to shape the first AppSec Owner's Manual. You get the full Standard Terrain Check. Plus: two follow-up sparring calls after delivery. When your first big decisions come up and you need to use the manual, I help you talk it through. This is included because I want to see how you use it and what you still need.
How long does it take?
Weeks, not months. Realistically, we should be done in two to three months. It depends on how quickly we can schedule the interviews and how fast you give feedback.
How it works
Kick-off & Plan
We start with one call. You give me the lay of the land: your SDLC, your roles, and what documents you already have. Together we figure out which ones are relevant and which stakeholders I need to interview.
Want to map this out before committing? We can do a short pre-call to define the roadmap.
Understand your terrain
I review your documents and run confidential stakeholder interviews. I won't share raw data with you, but let every stakeholder confirm I got it right before I move on. That helps them feel safe to give honest answers.
Everything gets deleted after your AppSec Owner's Manual is created.
Navigate your terrain
I build your AppSec Owner's Manual. It maps where responsibility lives, officially and in practice. I compare it against the reference and flag what is most fragile.
You provide feedback and put it to work. When you miss something essential to work with it, I'll add it. This is how we ensure it actually helps you steer.
Still have questions?
Interested in becoming a founding client?
So, you're serious about improving software security? Awesome. Let's have a campfire talk about your AppSec challenges. Ok, no campfire. Just AppSec.
