Brett Crawley

Author: Brett Crawley (55)

Brett Crawley is a principal application security engineer and the author of Threat Modeling Gameplay with EoP (Packt, 2024). He created SBOM-Graph and the Elevation of Autonomy card deck for threat modelling AI, LLM and agentic systems, contributes to OWASP, and writes The Blast Radius newsletter on supply chain security, AI security and EU regulation.

Ideas and Opinions from the Trenches

There are lots of ways we can optimise what we do, through a data driven approach, but we need to be careful and use critical and creative thinking.

What! Think before coding? WHY?

Why are so many people just diving, straight into the code? A minimum of requirements and design? Perhaps a threat Model?

Software Engineering Security Culture

We need to fix the culture, from top to bottom in the software engineering industry. Here are just some of the issues as I see them and what we should be doing about them.

Threat Modeling Gameplat with EoP

Threat Modeling Gameplay with EoP

Coming soon to a bookshelf near you, Threat Modeling Gameplay with EoP: A reference manual for spotting threats in software architecture

Browse all Topics