Oskara presents: PORPLE.
PORPLE helps companies to start incorporating security into their software development. PORPLE does this by evaluating multiple different aspects of software development to suggest what action provides the best return. "We need to change. We can't fix everything at once. PORPLE helps us get going".
The cybersecurity market is NOT adapted to help companies balance security with the current pace of demand. Instead, there are 2 extremes. Either the patch-work, buy-more-security tools method, where you try to fix issues after they've been discovered, OR the overhaul method, where it's expected that companies seize all other operations, to fix their security flaws. Both of these options are too expensive, too slow, and don't provide either sufficient security, happy workers, or good returns on investments.
PORPLE covers the spectrum between these 2 extremes. We understand that companies need to change, but also that reality makes this hard, so you have to be smart with your decisions. Sometimes it's the purchase of security tools, sometimes education sometimes just a little line of code, but there's a time and a place for all of these.
I (Oskar) started working on making PORPLE a product as during my career, both as a developer and cybersecurity advisor, I've seen that there exist no flexible options for companies, which usually results in companies either choosing to gamble with their security or waste huge amounts of money because they don't understand the huge field that is cybersecurity.