Home /

Blog | Crash Override

Out-of-Band, In Control: Why We Built Ocular

Ocular is a flexible, open-source platform for scalable security scanning beyond your CI/CD system.

By Bryce Thuilot

Jul 17, 2025

Featured

Builds Don’t Lie. Unless You’re Not Watching Them.

By John Viega

Jul 15, 2025

Seeing What Matters Starts with Shadow Engineering Detection

By Mark Curphey

Jun 17, 2025

Hooray! Security Teams May Still Be Accountable for Secure Software, but Developers Are Now Taking Responsibility for It and Here Is Why

By Mark Curphey

Jun 3, 2025

How to Uncover Potential Shadow Engineering Situations

By Sean Clarke

Apr 30, 2025

The Curious Case of Shadow Engineering

By Mark Curphey

Apr 28, 2025

RSA 2025: Lost in the Petting Zoo, Searching for Signal

Another RSA Conference has come and gone. Security marketing is having an identity crisis. It is time for a reset.

By Rich Smith

May 7, 2025

How-to add code owners files to all of your production repos

How to easily make sure you have code owners files in all of your production repos using the Crash Override platform

By Sean Clarke

Apr 16, 2025

The Security Industry Needs More "Easy Buttons"

The security industry must prioritize creating streamlined, user-friendly solutions—'easy buttons'—to reduce the complexity and costs for development organizations.

By John Viega

Jan 14, 2025

Security Marketing Exposed - Part One

Why understanding marketing is a super power for running operational security programs

By Mark Curphey

Jan 8, 2025

Security

When "You Could Be Hacked" Is the Best We've Got

Most GenAI security lists miss the mark. Here’s what developers actually need to build secure software with real tools and context.

By Mark Curphey

Jul 24, 2025

Opengrep - The Security Industry Deserves Better

Opengrep, a fork of Semgrep, raises concerns in open-source security. This blog investigates the motivations behind Opengrep, defends Semgrep’s open-core model, and calls for industry accountability.

By Mark Curphey

Jan 29, 2025

Are there too many bubbles of similar security efforts?

Why we shouldn't work together for the greater good of the security industry

By Mark Curphey

Mar 26, 2024

SBOMs for Production Incident Response Maybe a Killer Trojan Use Case for Security

SBOMs are more valuable for platform engineers than they are to security engineers today, and why this will help security in the long run.

By Mark Curphey

Nov 14, 2023

Whack-a-mole is dead

Welcome to the post alerts and issues era, and why security insecticides are a better approach.

By Mark Curphey

Nov 6, 2024

On Social Media Witch Hunts and Learning Important Lessons

As Jen Easterly from CISA said, ‘this (CRWD saga) is a dress rehearsal for what China could do in the future’ and if we don’t learn the actual lessons here we are doomed to repeat history.

By Mark Curphey

Sep 10, 2024