06 / security by design · keycloak · owasp
Secure Software Development
Security built in from the design stage: identity and access with Keycloak, and development aligned with recognized standards.
- 01
Security by design across the entire software lifecycle
Threat modelingLeast privilegeDefense in depthSecure SDLC - 02
Keycloak implementations for identity and access management (IAM)
Single Sign-OnOpenID ConnectOAuth 2.0SAML 2.0MFA - 03
Integrating Keycloak with existing applications and directories
Spring SecurityAPIs and microservicesLDAPActive DirectoryIdentity federation - 04
Development aligned with security standards and best practices
OWASP Top 10OWASP ASVSNIST SSDFISO/IEC 27001CWE - 05
DevSecOps: automated security in the delivery pipeline
SASTDASTDependency scanningSBOMSecrets management - 06
Secure code review, vulnerability analysis and remediation
// training
Team training
Secure development training: security by design, OWASP, threat modeling and Keycloak implementation, with exercises on real applications.
VirtualOn-siteHands-on workshops
// other services