This Thanksgiving, let's thank the preventers.

Ever since LinkedIn changed their recommendation algorithm this month (Is it AI now?), my feeds have become less informative (for lack of better words) with posts that are either political statements (Why? We have X already for that!) or even more dangerous ones - posts that boast about new CVEs!

"Hey, look at me. I filed a CVE and got paid $500."

"I clicked a button on burp and filed a CVE on H1. Mom, I'm a security researcher now!"

We have created a system where we reward the bounty hunters and their tools after insecure things get released and the snake is already out.

What about the people who write secure code, implement secure pipelines, or configure infrastructure correctly so that the vulnerabilities never get into production environments? What about the author of popular tools and linting plugins that prevent vulnerabilities such as SQL Injection and XSS from even getting added in the first place? How much $500 per CVE NOT CREATED are they earning?

These are the preventers. Like defenders, hunters, and testers, they play a crucial role in helping us sleep peacefully.

Let's thank the preventers this Thanksgiving!