DevSecOps
The Bug in Production: What You Don’t Know Can – and Will – Harm You
Frank Huerta | | CI/CD pipeline, devops, QA testing, Quality Assurance, rollbacks, rollouts, software bugsDespite the risk of unplanned downtime, many organizations that develop software and services push them live without adequately testing for bugs that will manifest against production traffic. This is a huge gamble: ...
Motorola Solutions: Driving a Thriving Security Culture
It’s crunch time in the cybersecurity industry. For too long, many companies have remained unmoved by the increasing threat of cyberattacks, despite increased digitization of their products and services. Customer data is ...
DevSecOps: Can JIT PAM Bring Relief?
IT and cybersecurity leaders have come to agree that the purpose and intent of DevSecOps is to create a mindset that "everyone is responsible for security," while also incorporating application and infrastructure ...
Guess Who’s Coming to JFrog swampUP?
The annual DevOps gathering and JFrog user conference, swampUP 2019, is going to be here before we know it. It’s happening June 17-19 in San Francisco, providing easy access for everyone (it’s ...
The Challenge of Securing a Dynamic, Cloud-Based DevOps Environment
The tech landscape has fundamentally changed over the last decade. The steady migration from local data centers to cloud computing combined with the advent of DevOps and the rise of containers have ...
CloudBees Acquires Electric Cloud to Advance Continuous Delivery
Mike Vizard | | acquisition, application release automation, cloudbees, continuous delivery, devops, devops tools, electric cloudCloudBees announced it has acquired Electric Cloud as part of an effort to extend the reach of its DevOps portfolio further into the realm of continuous delivery and application release automation (ARA) ...
DevOps and Security: Be Ready to Shield Your Application
Debarghya Pandit | | application security, CI/CD pipelines, devops tools, devsecops, Jenkins, OWASP, software securityAll of us have heard of continuous improvement/continuous delivery (CI/CD). There are many benefits to implementing CI/CD, as it helps seamless integration from end to end for development and deployment processes. CI/CD ...
5 Practical Ways to Deliver Secure Software That Could Actually Work
Zehra Ali | | application security, devsecops, SDL, Secure Developmental Lifecycle, software securityAlmost every aspect of modern life is dependent on technology. As technology becomes even more advanced and pervasive, so, too, does the need for secure software. Today, even the tiniest breach at ...
Effective Cloud Security Requires a Cloud-Native Mindset
Thousands of developers and cloud security professionals will fill the Moscone Center in San Francisco next week for the sold-out Google Cloud Next ’19 conference. Three days of breakout sessions and keynotes ...
How to Design DevSecOps Compliance Processes to Free Up Developer Resources
Anything that gets rolled out quickly in the technological world is a major step forward—as long as it doesn't compromise security. DevSecOps is able to provide compliance processes far more effectively than ...
4 Steps to Introduce DevSecOps to Database Development
Although DevOps was implemented within application development, there is a growing awareness that including the database within DevOps processes is vital to success. We live in a data-driven world and many front-end ...
4 Steps to Improving Your Team’s Continuous Security
A recent npm survey revealed that 77 percent of developers were concerned about the quality and security of the open source libraries they use, while 52 percent said the tools currently available ...
