
The API Made Me Do It

Secure From Scratch is a different way to think about secure coding.
Security should not be added after software is built. It should shape how software is built - from the first line of code.
We believe the secure way should also be the easy way. Safe defaults, safer APIs, explicit trust boundaries, and designs that make entire classes of mistakes harder to introduce.
Security knowledge should not live only in checklists and developers' memories. Encode it into types, APIs, frameworks, build rules, and the tools developers use.
These principles apply equally to humans and AI. Good guardrails help both produce safer software.
We teach programming, not patching.
Our goal is not just to find more vulnerabilities. It is to create fewer of them.
our Secure coding principles
Security is the first priority
Redundant defenses ensure multilayerd defense in depth
Easy to use securely. Easy to use safely. Always prefer safe by default to safe through action
Verify if the components you use and your implementation are safe and follow current best practices
Events, Errors and Exceptions - Log them, manage them
Neat code. Security through clarity. Neat code is not just easy to maintain, but also reduces undetected vulnerabilities.
Trust boundaries. Transferring data or control between entities with different trust levels requires proactive action.


Our First Book Is Out!
THINK SECURELY. CODE CONFIDENTLY. BECOME TRUSTED.
Effective Secure Coding: Part I—Building Safer Features—Java Edition presents 13 practical feature-design habits and 10 focused deep dives that will help you build security instincts that last, create features that are harder to break, and become the developer others rely on.
our services
Secure From Scratch course
Secure For devs workshops
Secure from scratch for youths
mentorship
secure code review
the team
or sahar
cofounder and ceo
yariv tal cofounder
and cto
erez yalon
advisor


