Bruce Mayhew
VP, Product Innovation
Washington DC-Baltimore Area United States
Summary
🤩
Rockstar🎓
Top SchoolBruce Mayhew is a seasoned application security and product innovation leader with over two decades of experience blending hands-on development, static analysis, and security strategy. As VP of Product Innovation at Sonatype and longtime WebGoat project lead, he has shaped how organizations build security into the SDLC and helped train thousands via the deliberately insecure WebGoat platform (over a million downloads). His background ranges from embedded real-time systems and UIs to leading static analysis research at Ounce Labs/IBM, giving him a rare depth in both developer-facing tooling and attacker-style code review. Bruce combines product ownership of data-driven open source risk solutions with practical vulnerability hunting, and he helped formalize Java security certification through GIAC and SANS programs. He is based in the Washington DC–Baltimore area and brings a researcher’s curiosity to pragmatic product decisions.
11 years of coding experience
28 years of employment as a software developer
BA, Computer Science, BA, Computer Science at State University of New York College at PotsdamJohns Hopkins University
Github Skills (10)
javas10
network-programming10
java10
web-application-security10
spring-boot9
debug9
debugging9
api8
apidoc8
sql8
Programming languages (3)
Github contributions (5)
WebGoat/WebGoat-Legacy
May 2014 - Aug 2018
Legacy WebGoat 6.0 - Deliberately insecure JavaEE application
Role in this project:
Back-end Developer
Back-end DeveloperContributions:69 commits, 18 PRs, 23 pushes in 4 years 2 months
Contributions summary:Bruce primarily focused on fixing OS-specific behavior in the `netstat` command for data display and parsing. They addressed errors in the parsing of network statistics, likely to provide better compatibility and functionality across different operating systems. The user also fixed various netstat output and parsing errors, suggesting involvement in network monitoring and troubleshooting within the application. Furthermore, the user modified code within the `Challenge2Screen.java` file, indicating participation in backend lesson logic.
javajavaee
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.