The intersection of Security and DevOps. What does 2015 hold in store? Organizations are under increasing pressure to do more, faster. But cybersecurity breaches by criminals, hacktivists and state sponsored actors have cast ...

When organizations write user stories for development it should include the acceptance criteria.  The acceptance criteria being a detailed description of the expected features and functionality the story should deliver.  Far too ...

There’s no doubt that 2014 will be remembered in the IT industry as a year of major security breaches. The year started with virtually every US resident worrying whether they’d been affected ...

We are very happy to announce that we will be hosting DevOps Connect: SecOps Edition at RSA Conference on Monday, April 20, 2015. It will take place at the Moscone Center and is ...

Integrate security testing into your dev process now or else face cyber-attacks later The way we develop software has been radically transformed in the last few years. Agility and speed are vital ...

We are happy to announce the next DevOps.com Webinar, in partnership with CloudBees : CI and CD Across the Enterprise with Jenkins Delivering value to the business faster thanks to Continuous Delivery and DevOps ...

Moving security to the left has become a coined phrase meant to describe the process of getting the security team involved earlier in a process.  Most typically, the phrase is used in ...

This week Stephane Chazelas, an Akamai security researcher, discovered an interesting bug in the Unix Bash (Bourne Again Shell) shell – known as “Shellshock” or “Bash Bug”. This vulnerability affects a wide range of operating systems ...

Much has been written about the role of Security in a DevOps culture. Almost universally the thought is that DevOps can help improve security. Why? How? Really? An old friend of mine ...

If there's one thing the DevOps cultural and professional movement taught us, it's to question the status quo for the betterment of our customers, businesses, and ultimately, our teams. The combination of ...

Those of us highly focused on the delivery pipeline of DevOps will wonder why we should include the security guy to the party.  After all, aren’t they just going to slow down ...

If you’ve ever seen people run a relay race, you’ll notice that most of the risk happens when the baton is handed from one runner to the next.  In IT processes, there ...