Product Security¶

Product security is the practice of building, maintaining and operating products with security as a first-class requirement throughout the entire lifecycle.

Key concepts¶

• PSIRT (Product Security Incident Response Team) — the team responsible for vulnerability handling.
• Security-by-design — integrating security from the architecture phase.
• CSAF — structured security advisories for coordinated disclosure.
• Misuse cases — documenting how products could be abused.

How TrustSource helps¶

• Products with PSIRT contacts and misuse cases.
• CSAF documents for security advisories.
• Threat modelling with STRIDE/LINDDUN.