The fusion of DevSecOps and trusted application delivery can extend the GitOps pipeline and add business value ...

New Relic made available a public preview of an application security testing tool that will be integrated into its observability platform ...

By focusing on application security like an attacker would, DAST can discover potential security threats that static testing methods might miss ...

Shift left involves providing developers with the context they need to prioritize and remediate threats appropriately ...

JFrog is adding a curation capability for open source software that will use metadata generated by binaries to identify malicious packages and software components with licensing issues ...

Tabnine this week made available in beta a tool that enables developers to use natural language to interact with the artificial intelligence (AI) models embedded within its test automation platform. Brandon Jung, ...

In my recent article Revolutionizing the Nine Pillars of DevOps with AI-Engineered Tools, I explained that the continuous delivery pillar is an approach where code changes are automatically built, tested and prepared ...

HashiCorp this week acquired BluBracket to add a set of static secrets discovery tools to its portfolio ...

Bionic this week added a pair of tools to its application security posture management (ASPM) platform that make it simpler to triage threats based on severity and attach a risk score. Josh ...

Organizations are embracing cloud-based application delivery for speed of delivery and scale. However, the proliferation of multi-cloud systems to access and maximize the cloud’s capabilities is driving complexity in IT environments. Many ...

Organizations are still increasing their use of low-code/no-code (LCNC). But this adoption isn't always consolidated around one tool—frequently, multiple low-code/no-code platforms are used under the same roof. In fact, Gartner predicts that ...

Over the last few years, the ability to secure our applications has grown, and deep integration into the DevOps toolchain has, too. There are more tools doing more security checks protecting more ...