
Creators of Puma Scan, a .NET SAST tool for Visual Studio & CI/CD. Cloud security, pentesting, DevSecOps consulting. #SecDevOps #CloudSecurity
West Des Moines, IA
Joined September 2016
- Tweets321
- Following410
- Followers301
- Likes90
Pinned Tweet
Puma Scan finds security vulnerabilities in C# and .NET code as you write it. Works in Visual Studio, GitHub Actions, GitLab CI, and Azure DevOps. Try it free → pumasecurity.io/pricing
Before saving a credit card in his golf club's app, @ericmmead put it behind a proxy.
10 min later: the club's payment processor credentials, in his own profile.
10 more: any member's record via one integer in the URL.
CVE-2026-15657/15658. Fixed.
pumasecurity.io/resources/bl…
We built a Claude Skill for Puma Scan — now Claude can run .NET security scans, interpret findings, and help developers fix vulnerabilities directly in their workflow.
@AnthropicAI
pumasecurity.io/resources/bl…
Puma Security retweeted
Absolute AppSec will be live tomorrow (12PM ET) with @sethlaw and a magnanimously guest-hosting @lojikil. Meanwhile, enjoy @cktricky and Seth's discussion of automated static analyzers along with Seth's demo of Puma Scan @puma_scan for .NET applications. youtu.be/7YDfMwbDgp8
We are excited to announce a new feature in the Puma Scan Professional v1.1 release: @sonatype OSS Index Integration. Learn how to start scanning for vulnerable dependencies here: pumascan.com/resources/sonat…
Get your hands on a copy of Visual Studio 2019 Tricks & Techniques ow.ly/mSIh50DxRDm by @PaulBSchroeder & @curea. It features our favorite security tool, @puma_scan #pumascan #pumasecurity #visualstudio #securecoding pumasecurity.io.
Unsure of your cloud architectures' security? Contact us and we’ll get you on the right path. Our security engineers will help build and harden your cloud infrastructure! pumasecurity.io.
Upgrades to Puma Scan Professional are available! #Azure, Server & End User tools include an upgrade of the #.NET Compiler API to v3.0 to enable scanning of C# 8.0 projects. More information can be
found at pumasecurity.io.
Upgrades to Puma Scan Professional #Azure #Server & End User tools are available now! This includes: migration of the entire analysis engine to #.NET standard to support scanning cross platform. More information is found at pumasecurity.io.
Puma Scan Professional for #VSCode provides real time security scanning on macOS and Linux. Like #VSCode, Puma Scan is extremely light with great performance. Find out more at: pumasecurity.io.
Our new product, Puma Scan Professional End User Edition now integrates with Visual Studio Code, a cross platform – Windows, Mac or Linux code editor from Microsoft. Contact us to get set up today! [email protected].
Puma Security, LLC, Puma Scan now offers End User Edition in #VSCode - mailchi.mp/59a13bc7ea69/puma… Contact us! [email protected]
Examine real-world scenarios that security professionals encounter defending Cloud workloads running on Serverless Infrastructure
👉 pumasecurity.io/resources/bl…
#DevSecOps
Security control is rarely utilized in test driven development. Coach your DevOps teams and developers to make security units tests the foundation of your test driven development. They are easy to write and maintain. Teams should strive for high code coverage in vulnerable areas.
Get faster Security Unit Testing feedback while building strong security checks in the #DevOps Pipeline. We provide the insight, consulting and customization necessary to enable secure product delivery. ow.ly/FsDu50zwrvu
Don't let the following Cloud Security Responsibilities be a burden: VPC Endpoint policies to block external resource access, audit logs for theft & API anomalies, EC2 to disable Instance Metadata Service v1. We can simplify this for you! Visit: ow.ly/90WL50ztgBP
Avoid falling victim to the #Cloud. Vulnerabilities occur when an application requests data from an untrusted URL location. Follow customer Cloud Security Responsibilities by writing secure code, no SSRF, enforcing least privilege execution IAM roles & configuring VPC Endpoints.
It feels like @RSAConference was an eternity ago! @emjohn20 provided a valuable talk on Defending Serverless Infrastructure in the Cloud.
Attendees called it "the best course of the conference" and "great and timely content".
rsaconference.com/usa/agenda…
Be successful & in control with Modern Security. Integrate DevOps culture & practices into your security structure. Leverage version control to enforce mandatory code reviews, monitor high risk code changes & enforce change approval for audit & compliance. We can help!

















