Hello Community,   

It’s the time for the monthly recap again! I’m also excited to announce the new Tips Tuesday series next month where we’ll focus on using Analytics to tell your AppSec story - read on for more details. 

🔥TRENDING DISCUSSIONS  

Those were just a few of the engaging discussions last month, what did I miss? Let me know in the comments below!  

• How to make analytics dashboard to show all policy compliance?  
• What does your security champion program look like?  
• How to be an effective security champion?  

🔖NEW RESOURCES  

Guide: Identity API "How To" Guidance   

Takeaway: Examples of using the Identity API to manage users, teams, business units, and API credentials.  

Article: .NET Remediation Guidance for CWE 915  

Takeaway: .Net remediation advice for flaws of type CWE 915: Improperly Controlled Modification of Dynamically-Determined Object Attributes  

📅UPCOMING EVENT  

September Tips Tuesday: Using Analytics to Tell your AppSec Story @9/8, 9/22  

In our Tips Tuesday series next month, we'll invite @esweeney (Veracode.com)​ , @Erica, Security Program Manager (Veracode, Inc.)​ , the Analytics experts at Veracode, to share their top tips on using Veracode Analytics to answer questions about your AppSec programs from different stakeholders without falling down the analytic rabbit hole. 

• September 8: “Start with the Right Questions” - How to Navigate Your Data with End Goals in Mind  
• September 22: “Don’t Get the Call from CISO” - How to Tailor Your Dashboards to Different Audiences

🙋UNANSWERED QUESTIONS  

Here are some questions that are still open and waiting for your contributions. It takes a community to make the Community helpful.  

• How does Veracode SCA determine whether a library update will break or not our code?  
• How to create a report that shows the whole path (start and end points) for every flaw raised in the scan?  

Did I miss anything? Let me know in the comments what do you want to see in the next monthly Community news.  

--Shuning