ABOUT US
Looking for someone that can detect hard to find vulnerabilities in your products, setup your secure software development lifecycle, increase your security maturity and stay compliant? That’s us.
After working with enterprises and SMEs, we crafted a unique approach to product security, based on creating and maturing the security culture of your teams.
We spend quite some time researching and trying out new technologies and techniques. That’s why our team regularly speaks at leading cybersecurity conferences like BlackHat, DEF CON, DevSecCon, DevDays, Cyberwise.
Check our talks and our open-source security tools
Our approach
We merge offensive and defensive security to provide real value and provide a zero false positive approach.
Our best skills
Product Security
and DevSecOps
Expert guidance on SSDLC, EU regulations and technical implementation of NIST SSDF or OWASP SAMM. Be ready for your next compliance requirements.
Penetration Testing
Security audit that simulates real cyber attacks against your products, assess your security controls and maps to OWASP standards.
Secure Coding Training
DevOps are the first line of defense. We train engineers to create secure products. All our courses are based on OWASP standards and testing guides.
Our vision
DCODX (Defensive CODing & eXploitation) bridges the worlds of offense and defense. Our mission is to empower clients to become self-sufficient by mastering both secure development and adversarial thinking.
Our partners
Our success stories
Working with DCODX was a seamless and highly effective experience. Despite having only a brief introduction and minimal guidance, Davide and Stefan quickly identified critical security vulnerabilities through their expert penetration testing. We’ll definitely use their services in the future.
Andrej Rankovski
Our recent Secure Coding for .NET & Java training, led by Davide Cioccia from DCODX, was a resounding success for the developers at Working Spirit. The hands-on approach allowed our team to dive right into real-world .NET & Java security challenges, guided by Davide’s deep expertise and practical insights.
Boyd van den Hoogen
DCODX’s secure development training and pentest services exceeded our expectations! The trainers’ expertise and engaging sessions made learning secure coding a breeze for our developers. The pentest report was thorough and easy to follow, providing us with valuable insights.
Laure Kuijpers
You are in good company
