Lessons from Running a Product Security-Focused Cybersecurity Clinic

Learn from the experiences of establishing and operating Stanford's innovative product security clinic through this 29-minute conference talk from BSidesSF 2025. Discover how Aditya Saligrama and Joey Holtzman created a unique cybersecurity clinic model in 2023 that diverges from traditional university approaches by focusing on product security rather than corporate security. Explore their mission to help community organizations secure the software services they offer and gain insights from their first two years of operation. Understand the challenges, successes, and lessons learned from running a community-focused cybersecurity clinic that bridges academic resources with real-world security needs for nonprofit and community-based organizations.