Welcome to the ThoughtWorks Security Guide

This site is a community effort to create a central repository of best practices for creating secure web apps, deploying secure infrastructure, and keeping your device and communication secure.

Please contribute! You can either fork this project directly and issue a pull request, or send suggestions and edits to infosec@thoughtworks.com.

When it comes to computer systems, paranoia is healthy, because there really is someone out to get you. But don’t panic! Because now you have found this site, and we will walk you through what you need to know.