Northstar's product security pipeline: a product idea flows through eight joined stages — design, build, ship, SBOM, disclose, PSIRT, patch and improve — and leaves as a secure, supported product; below, one PSIRT case where a researcher's report is welcomed under safe harbor, scored consistently with CVSS, traced to the same authentication library in three product lines, published with a CVE and advisory, and fixed with signed, backported updates; and a full-depth SBOM that finds a vulnerable logging library three layers deep, with a VEX statement telling customers where the flaw is not exploitable.

CY-SENIOR-018Senior Level · Product Security

Product Security & PSIRT Leadership — The Product Security Pipeline

A senior-level course that secures the products a company ships and handles their vulnerabilities responsibly. Work the product security pipeline - eight stages: Design, Build, Ship, SBOM, Disclose, PSIRT, Patch, and Improve - building security into products and running the PSIRT that answers when researchers find a flaw. Program-level and technical. Four hands-on activities in every lesson.

16 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Build security into product design and build.
Ship with an SBOM and a disclosure policy.
Run a PSIRT that triages and coordinates product vulnerabilities.
Patch, communicate, and improve product security over time.

Price:৳10,000