IT as Code
Turning Off DevSecOps Noise for Functional Fidelity
Analyzing the DevOps and DevSecOps software marketplace demonstrates the high demand for tools and platforms that reduce false positives. As businesses and organizations adopt a rigorous, disciplined software development life cycle and ...
More Than Half of DevOps Pros Have Backdoor Access to IT Infrastructure
Mike Vizard | | devsecops, infrastructure, IT infrastructure management, policy management, strongDMA survey of 600 DevOps professionals conducted by strongDM, a platform for managing access to IT infrastructure, found nearly two-thirds (64%) had productivity impacted on a daily or weekly basis because of ...
Survey Reveals High Cost of Application Modernization
A survey of 250 software developers and architects in the U.S. found nearly three-quarters of respondents (74%) reported that the average cost of an application modernization project is nearly $1.5 million, with ...
TechStrong Con: Open Source Software Community Needs Security Help
The only way to make significant improvements in the state of open source security is if more organizations that benefit from open source projects commit to making more resources available to achieve ...
Developer’s Guide to Web Application Security
Anas Baig | | web application security, Web Application Security Risks, Web Application Vulnerabilities, Web Security VulnerabilitiesWhen it comes to security, there are many vulnerabilities that can leave your website or web app open to attack. In this article, we'll go over 15 common web application security vulnerabilities ...
Survey Sees Alternative Cloud Service Providers Gaining Ground
A survey of 458 development professionals, managers and senior leaders conducted by Techstrong Research, a sister entity of DevOps.com, found 43% are considering adding additional cloud service providers in the next 12 ...
Four Steps to Avoiding a Cloud Cost Incident
Asim Razzaq | | cloud, Cloud Computing, cloud cost, cloud cost management, cloud spend, cloud waste, Cost Anomaly, Cost Anomaly Detection, devops, FinOps, taggingThe recent Flexera 2022 State of the Cloud Report found that organizations waste 32% of their cloud spend, up from 3o% last year. This can be due to cloud cost incidents triggered ...
Codenotary Adds SLSA Framework Support to Advance App Security
Codenotary this week announced it has integrated support for the Supply-Chain Levels for Software Artifacts (SLSA) framework in its free notarization and verification service for ensuring the integrity of code. Moshe Bar, ...
Survey Surfaces Raft of Application Security Issues
Mike Vizard | | devsecops, ReversingLabs, SBoM, Software Supply Chain, Software Supply Chain SecurityA global survey from ReversingLabs found 87% of respondents agreed that software tampering has become a more frequently-used cybersecurity attack, but only 37% said they have any means to detect it. The ...
Jit Emerges to Address Cybersecurity Policy-as-Code Orchestration
Jit today emerged from stealth with a free namesake orchestration platform beta that automatically implements security plans as code. Aviram Shmueli, chief product officer for Jit, said the company will both make ...
How to Manage and Engage Remote Engineering Teams
As engineering teams look to remain remote or hybrid, executives need to fundamentally change how these teams are managed. After tackling the tactical aspects of a distributed workforce—like home office equipment, a ...
Saying Goodbye to Legacy Systems
Are you still using a rotary phone, tube television or Rolodex? Probably not. But if you were, you’d still be using newer technology than what many enterprises still rely on every day ...
