a Futurum companyTag
23 articles
Blogs
Learn how to add four automated security gates to GitHub Actions using npm audit, Snyk, Trivy, CodeQL and OWASP ZAP—without an enterprise licence.
Showing 1–23 of 23
Blogs
Checkmarx accelerates its AI-driven DevSecOps strategy after acquiring Tromzo, integrating AI agents to automate application security across the software development lifecycle.
Blogs
Rebranding DAST isn’t about slapping a new label on the same old toolset — it is about demanding more from vendors and shifting the way we think about security testing.
Blogs
Don MacVittie believes we’ve made progress integrating security across the SDLC, but there’s still a ways to go.
Blogs
Now that AI has made advanced automation a fact, it is time to consider implementing the level of testing we always knew we should have.
Application Performance Management/Monitoring
Veracode launched a version of its automated DAST tool, dubbed DAST Essentials, that is embedded within an IDE.
Best Practices
By focusing on application security like an attacker would, DAST can discover potential security threats that static testing methods might miss.
Blogs
Over the last few years, the ability to secure our applications has grown, and deep integration into the DevOps toolchain has, too. There are more tools doing more security checks…
Blogs
Synopsys plans to extend the capabilities of its Polaris Software Integrity Platform for securing application development environments by adding dynamic application security testin…
Blogs
It’s essential for organizations to learn more about the software supply chains they rely on and the steps needed to secure them. In just the past few years, we have seen a major u…
Blogs
An update to the OWASP Zed Attack Proxy (ZAP) open source dynamic application security testing (DAST) tool made available today improves performance by employing a multi-threaded p…
Blogs
Analyzing the DevOps and DevSecOps software marketplace demonstrates the high demand for tools and platforms that reduce false positives. As businesses and organizations adopt a ri…
Blogs
For a good long while, DevSecOps referred specifically to vendors like Veracode that did static application security scanning, dynamic application security scanning, software compo…
Continuous Delivery
Synopsys, Inc. plans to add dynamic application security testing (DAST) tools to its software-as-a-service (SaaS) platform in the wake of agreeing to acquire WhiteHat Security from…
Blogs
One of the biggest cybersecurity risks involves vulnerabilities in the application layer. After all, the best firewall is useless if the web application itself is vulnerable. Many…
Blogs
Research estimates that cybercrime is going to cost the world $10.5 trillion annually by 2025, so it is no surprise that cybersecurity has become a top priority for business leader…
Blogs
Google today launched a GitHub app that provides automated continuous enforcement of security best practices for GitHub projects. Kim Lewandowski, a product manager for open source…
Application Performance Management/Monitoring
JFrog today announced it has agreed to acquire Vdoo for $300 million in cash to gain a set of analytics tools that discover vulnerabilities in application binaries. Vdoo’s scanning…
Blogs
In my prior blog, Continuous Testing – The Quest for Quality at Speed, I described five tenets and some of the practices for continuous testing to help with understanding what cont…
Blogs
According to the most recent Verizon Data Breach Investigations Report, almost 90% of data breaches are driven by financial gain, up from 71% in last year’s report. Most noteworthy…
AWS Community Hub
CI/CD pipelines are at the core of daily operations for many businesses today. These processes, when set up correctly, help to keep the delivery process consistent by automating ma…
Blogs
Security testing has always been an important step in the application development process. Yet, traditional measures often occur too late in the process to effectively find and fix…
Latest News Releases
Issued Patents Will Drive Innovation in Managing Large Volumes of Data Generated by Application Security Testing Programs San Antonio, TX – October 30, 2018 – – Denim Group, the le…
