I *may* have bought a new guitar. ☺️ It's new-to-me, and so pretty!
Obviously I need a new amp now, right???
Remote
Tanya Janca | SheHacksPurple 
@SheHacksPurple@infosec.exchange
mastodon 4.8.0-alpha.3+glitchAuthor of Alice and Bob Learn Secure Coding AND Alice and Bob Learn Application Security!
She/her/lady/woman. shehackspurple.ca
Secure Coding Training and Public Speaking Inquiries & other:
Tanya (at) shehackspurple (dot) ca
7040 Followers
642 Following
50 Posts
Joined October 31, 2022
SheHacksPurple:
Newsletter:
I think I'm done with this platform. All I receive is complaints. Clearly what I am doing is unwanted here. Please find me on LinkedIn, X or BlueSky. Bye.
Supply chain security is not just “check the package, ship the thing.”
That is like locking your front door while leaving every window open and a snack out for the raccoons. Cute? Yes. Secure? Absolutely not. #episode4
Watch: https://twp.ai/S9Cc3j
Listen: https://twp.ai/9OXdHT
Announcement: I'm the keynote for Sikkerhetsfestivalen (Security Festival) 2026, in Lillehammer, Norway! August 24 - 26, 2,000 of us will take over that tiny town to learn, party, and connect! Check out the link below to learn more. :-D
https://twp.ai/E5D4ib
I’m excited for the next book stream 😊 For Chapter 5 of *Alice and Bob Learn Secure Coding*, I’ll be joined by Katie Paxton-Fear to cover technology-specific security practices and what secure coding looks like across different architectures and platforms.
RSVP: https://twp.ai/9OYU1V
1/2
Do you live in the Cowichan Valley or on Vancouver Island? Want to join us for #OpenHack?!?!?! Of course you do! Sign up for the meetup here:
July 22: https://twp.ai/Wpsxcf
August 12: https://twp.ai/IltE2T (I will be at this one)
I’m excited for the next book stream 😊 For Chapter 5 of *Alice and Bob Learn Secure Coding*, I’ll be joined by Katie Paxton-Fear to cover technology-specific security practices and what secure coding looks like across different architectures and platforms.
RSVP: https://twp.ai/9OX6ki
1/2
I planted my dahlias less than two weeks ago. Look at my beautiful little plant babies! 😍😍😍 I'm so excited to see them grow. #infosecgardening
It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect
October (Security Awareness Month) will be here before we know it, and my calendar is officially open for bookings! If you're looking for engaging security content that software developers will actually enjoy, I'd love to help.
tanya AT shehackspurple DOT ca
1/4
Boosted by @GroupNebula563@mastodon.social
Replying to @LaserdiscTurtle@mas.to
Your software supply chain is not just “the code we wrote.”
It is the tools, packages, pipelines, build systems, humans, shortcuts, and gremlins we let near production.
Let’s secure the whole thing, not just the shiny repo. 💜 #episode4
Watch: https://twp.ai/NSWx2b
Listen: https://twp.ai/9OXDSP
Replying to @SheHacksPurple@infosec.exchange
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
Replying to @SheHacksPurple@infosec.exchange
Do it today, please. Tell your team. Watch the full 60 seconds.
Video link: https://twp.ai/4hpg2D
#AppSec #SupplyChainSecurity #DevSecOps #SecureCoding #npm
2/2
I joined The Secure Disclosure to talk OWASP Top 10, vibe coding, broken access control, and why “we’ll fix security later” remains one of our industry’s most cursed little traditions.
Spoiler: secure coding is not magic. It is a skill. We should probably teach it. 💜
Listen to the full episode with Vinit Patel now!
YouTube: https://twp.ai/IlpKBf
Spotify: https://twp.ai/9OUpnX
Apple Podcasts: https://twp.ai/4hpabT
Replying to @GroupNebula563@mastodon.social
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
https://twp.ai/E5DeU3
Another Psychology of Bad Code blog post! Let's talk about Shiny New Tech, and how to secure it!
https://shehackspurple.ca/2026/05/06/the-psychology-of-bad-code-part-5-shiny-new-tech/
I joined The Secure Disclosure to talk OWASP Top 10, vibe coding, broken access control, and why “we’ll fix security later” remains one of our industry’s most cursed little traditions.
Spoiler: secure coding is not magic. It is a skill. We should probably teach it. 💜
Listen to the full episode with Vinit Patel now!
YouTube: https://twp.ai/E5A0iy
Spotify: https://twp.ai/9OUlWu
Apple Podcasts: https://twp.ai/4hpWKq
It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect
Replying to @AwkwardTuring@infosec.exchange
@AwkwardTuring@infosec.exchange I'm going to build a completely new type of tool. But it will take a bit of time. Mostly because of travel schedule.
Replying to @AwkwardTuring@infosec.exchange
@AwkwardTuring@infosec.exchange I'm working on the technology problem. But I agree, if no one uses the safeguards we cannot win. ♥️
What do you think the future of AI Security is? Doom and gloom? Or amazing innovations and improvements? Or both?!?!?!
#AppSecThursday #talkAppSectome
I’m thrilled to share that I’ll be teaching at Black Hat USA this August!
My training is Secure Coding for Embedded Systems in C and C++.
If you write firmware or low-level code, we’ll dig into the security pitfalls that show up again and again in C and C++ and practice fixing them together.
Lots of vulnerable code. Lots of practical fixes. Lots of ways to build safer software.
🎥 Watch the short video below
🔗 Save your seat: https://twp.ai/9OWHiO
If you’ve ever felt like application security explanations were overly academic, painfully vague, or impossible to apply in real life, this book stream is for you 💜
https://twp.ai/9OWM1z
#appsec
1/3
The sneakiest supply chain attacks are not loud. They are boring-looking, easy to miss, and often invisible at first. Which is honestly what makes them so effective. Watch the full episode at DevSec Station to learn more.
It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect
Replying to @Xkyzero@ioc.exchange
I’m so excited to be teaching at OWASP Global AppSec EU 2026 in Vienna, June 22–26!
I’m delivering a 1-day training: “API Security: Hands-On Secure API Design and Hardening.”
If you want practical, developer-friendly techniques you can use immediately, you’ll love this.
Registration here: https://twp.ai/NTbMK7
More information on my session here: https://twp.ai/E6Grvz
I joined The Secure Disclosure to talk OWASP Top 10, vibe coding, broken access control, and why “we’ll fix security later” remains one of our industry’s most cursed little traditions.
Spoiler: secure coding is not magic. It is a skill. We should probably teach it. 💜
Listen to the full episode with Vinit Patel now!
YouTube: https://twp.ai/IlpLor
Spotify: https://twp.ai/9OUrQj
Apple Podcasts: https://twp.ai/4hpcEf
We’re live tomorrow at 11:00am PST!
I’ll be joined by Ray LeBlanc to walk through Chapter 2 of Alice and Bob Learn Secure Coding.
This is the “get the fundamentals right” chapter:
1/2
I’m doing another live book stream 😊
June 3, 8:00 am PST, I’ll be diving into Chapter 3 of Alice and Bob Learn Secure Coding with Scott Helme.
This chapter, “Improving”, is one of my favourites because it’s all the “okay but how do I actually do that?” stuff.
I’m thrilled to be keynoting at Sikkerhetsfestivalen in Lillehammer, Norway, August 24–26!
My talk is: "Threat Modeling Developer Behavior: The Psychology of Bad Code". I’m already excited to meet the community there and share practical ways to make secure software feel more doable for developers.
Tickets here: https://twp.ai/9Pbcli
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
https://twp.ai/E5Dkei
Thank you #owasp for having me in Vienna for the always fantastic #owaspglobalappsec!
#globalappsecvienna 💟
Replying to @SheHacksPurple@infosec.exchange
Whether you have a team of 20 or 2,000, I can deliver live virtual sessions anywhere in the world.
If you're planning your October Security Awareness Month activities, now is the perfect time to reserve your date before my calendar fills up.
3/4
I was on the Colorado Security Podcast with Frank Victory!
https://twp.ai/9OXGUK
Replying to on communicating.cypherpunk.observer
Starting any minute now (9:00 am PT): Chapter 4 of Alice and Bob Learn Secure Coding! Join Gaving Klondike and I for a great conversation and lesson!
YouTube: https://twp.ai/gDBIIS
LinkedIn: https://twp.ai/NSWJWC
Twitch: https://twp.ai/9OWZw0
Replying to @SheHacksPurple@infosec.exchange
I offer virtual keynotes, workshops, lunch-and-learns, and Security Champion Program sessions on topics including:
🤖 AI Security & Secure AI Development
🔐 Secure Coding
🎯 Threat Modeling
📦 Software Supply Chain Security
🛡️ OWASP Top 10 & Application Security
tanya AT shehackspurple DOT ca
2/4
Does “Shift Left” still mean something? If so, what does it mean to you? If not, tell me what ruined it for you.
#AppSecThursday #talkAppSectome
Dear followers, are you a developer, a security professional, or something else?
Replying to @trevdev@fosstodon.org
Replying to @dhry@mastodon.social
@dhry@mastodon.social nooooooo 😥😭😭😭
Come join Ray LeBlanc and I RIGHT NOW (on the hour) to talk about chapter 2 of my book!
https://twp.ai/9OWPH4
It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect
What was the moment that made you take security seriously? Tell me.
#AppSecThursday #talkAppSectome