Software Security Blog

A Guide to OWASP’s Secure Coding Practices Checklist
In 2022, 33% of newly discovered vulnerabilities were flagged as critical or high. Explore OWASP’s secure coding practice checklist and learn how to leverage its power to boost your threat protection and reduce attack risks Digitalization is both a blessing and a curse for organizations.…
Blogging About Everything Software Security – Threats, Updates, Best Practices, Tips, & More
Software touches the everyday lives of billions of people around the world. They rely on us (the software industry) to deliver dependable, safe applications for them to use. This blog is dedicated to working together to do our part to make the (software) world a better place…one piece of software at a time!
-
Code Signing Requires Four Different Components for the Code Signing Architecture As a software developer, you know the role of a code signing certificate, how important it is, and how helpful it is to provide trust to the users. If you have purchased a code signing certificate, then it won’t be new to say what’s the process…
-
Code Signing Certificate – Step-By-Step Renewal Guide Are you a software developer who has purchased a code signing certificate for signing a software? Has the code signing certificate that you purchased expired? If yes, that’s nothing to worry about. No matter from whom you purchased or what certificate you purchased, whether it’s Standard or EV Code Signing Certificate, they come…
-
Follow Code Signing Best Practices & Overcome Security Challenges Faced by Software Developers & Publishers We live in an era where software surrounds everyone. Whether you’re at home, your workplace, in the car, or virtually anywhere –software somewhere connects everything, running millions of lines of code. Being a software publisher or a developer, you know that…
-
Being a software developer or publisher, you might have an idea of how technology is evolving to require identification before trusting your code and allowing it to be installed on an operating system. Due to such strong requirements, you’ll want to consider signing your software, code, apps, and other executable files before making them available to users for…
-
image/svg+xml Starting June 1, 2021, GoDaddy will no longer issue or renew Code Signing or Driver Signing Certificates. Switch to COMODOCode Signing at $69/Yr GoDaddy Are you a software developer or a publisher who’s looking for a code signing certificate to sign their software, applications, executables, scripts, or device drivers? If yes and you’re not…
-
Sign Your Windows Scripts and Executables Using a Microsoft Authenticode Code Signing Certificate A Code Signing Certificate used for Microsoft Authenticode also called as Microsoft Authenticode Certificate, helps you digitally hash and sign your scripts and Windows executables files ( 32 and 64-bit file formats). For example, .cab, .exe, .dll, .ocx, ActiveX controls, .msi, .xap, .xpi,…
-
Code Signing Error: “Unable to Build a Valid Certificate Chain for the Signer” While Signing Adobe Air Application Using a Third-Party CA Code Signing Certificate This error is usually shown when an Intermediate CA Certificate is not the part of a code signing certificate chain for Adobe Air signing certificate. What Is an Intermediate CA Certificate? For…
-
Avoid Making Common Security Mistakes That Make Your Software Vulnerable to Attack As a developer, you’re certainly aware of the importance of following security best practices. But many times, we miss certain things, maybe because it hasn’t become second nature to us yet. Unfortunately, we realize only after a security issue has arisen, and it’s…
-
Eliminate Windows SmartScreen Warning Messages with an EV Code Signing Certificate If you’ve ever used or installed any software or drivers on Windows, then there’s a chance that you might have come across the warning message for unsigned software—or to be more precise a Microsoft SmartScreen Filter warning message, like below: Windows Treats Signed and Unsigned Software…
-
Boosting Software/Application Adoption Is a Challenging Task – Here Are 6 Tips That Can Help You’ve built your software/application. Designing and icons, everything looks good, and it’s working fine on all devices. Even the niche is unexplored and competition-free. Yet, the downloads of software/applications are stalled, and there’s no improvement. It’s not your mistake, but it’s…
-
EV Code Signing Certificate Comparison: Comodo vs Sectigo Signing your executable file, software, code with an EV Code Signing Certificate is one of the best decisions you can make as a software publisher or developer. As EV Code Signing is the only certificate that goes through the extensive vetting process to check the identity of the organization…
-
Code Signing Certificate Comparison: Get the Best One for Your Software/Application Code Signing Certificate is an essential component of securing Software/Application via digital signing technology. It helps to assure users that the digitally signed software code, executable files, and other digital objects are not modified since its signing while increasing the user’s trust and confidence.…
-
Consumer survey finds that a large majority of users avoid installing unsigned software For any software developer or publisher, one of the worst nightmares is that their software doesn’t even get a chance to run, not by any fault of the software but due to security warning because the software is not signed. We recently…
-

Get EV Code Signing to Remove Microsoft SmartScreen Warnings Instantly Publishing new software takes a lot of effort, and its success depends upon its usage. Just publishing the software doesn’t guarantee that it will be widely used. Microsoft SmartScreen Filter is one of the biggest obstacles faced by new software in its path to success.…
-
Learn about the Differences Between a Code Signing Certificate and an SSL Certificate If you’re into web or software development and you’re looking to secure your web presence, then there’s a possibility you might be asking yourself: is a code signing certificate the same as an SSL/TLS certificate? If so, let’s explore the similarities and…