Tag: devsecops
Production-Safe Testing: The Missing Piece in Most DevSecOps Strategies
Dharmesh Acharya | | application security, continuous security, devsecops, Production-Safe Testing, security testingMost DevSecOps teams invest heavily in security before deployment, yet attackers target the production environment where applications, APIs, and user behavior are constantly changing. If security validation stops before release, critical risks ...
ProjectDiscovery Brings Open Source AI Testing to Vulnerability Discovery
ProjectDiscovery has made available an autonomous security testing platform that leverages an open source artificial intelligence (AI) testing framework to detect and validate vulnerabilities at a lower total cost. Company CEO Rishi ...
Why CI/CD Security Testing Is Going Autonomous (and Why It Should Stay Local)
mehdi boutayeb | | application security, autonomous security testing, CI/CD, devsecops, penetration testing, Software Supply ChainContinuous integration and delivery changed the tempo of software. Teams merge dozens of times a day, infrastructure is redefined on every commit, and a new build can reach production in minutes. Security ...
HackerOne Extends Platform Reach to Remediate Source Code Vulnerabilities
HackerOne has added a remediation capability to its H1 Platform that reduces the amount of time required to remediate validated vulnerabilities and other weaknesses affecting specific lines of source code. Nidhi Aggarwal, ...
AWS Extends DevSecOps Reach to AI Coding Tools from Anthropic and OpenAI
Amazon Web Services (AWS) this week at the Black Hat USA conference revealed it is working with both Anthropic and OpenAI to integrate their respective coding tools with a service it has ...
RapidFort Extends Open Source Software Security Reach to Runtime Environments
RapidFort today at the Black Hat USA conference announced it has extended its ability to secure open source software to the runtimes that DevOps teams deploy in production environments. Michael Wood, chief ...
From API Integration to Agent Governance: What Backend Teams Need to Know About MCP
Many MCP projects begin with an existing API and a simple request: expose one backend capability to an LLM client. The quickest route is to wrap an endpoint as a tool and ...
Common Risks of Outsourcing Software Development, and How to Tackle Them
Roman Davydov | | Cybersecurity, devsecops, project management, software development, software development outsourcing, Third-Party RiskBoth SMBs and large enterprises often choose software development outsourcing over developing software in-house. It is no surprise, as partnering with external developers enables companies to bridge IT talent gaps that cannot ...
DevOps Is Drowning in Updates—and Engineering Is Paying the Price
Alex Vakulov | | cloud operations, devops, devsecops, information overload, platform engineering, site reliability engineeringDevOps used to be a manageable rhythm: several core tools, a handful of respected blogs, and a few incident write-ups that made everyone slightly uncomfortable in a useful way. Now it feels ...
Black Duck Extends Scope and Reach of Code Scanning Tool
Black Duck has updated its Coverity static analysis code scanning tool to provide deeper integrations with artificial intelligence (AI) tools along with updates to its user interface that make it simpler to ...
Zero Trust Starts at the Code: Building Secure Systems with PKI and DevOps Automation
BALA CHANDAR NAGALLA | | certificate lifecycle management, CI/CD security, devsecops, PKI, Software Supply Chain, zero-trustWhen a certificate expires, it can take down a production system, and teams usually only find out after something goes wrong. These issues are hard to catch because they rarely trigger alerts ...
AI Moved the Bottleneck From Writing Code to Understanding and Trusting It
Ted Julian | | AI code generation, AI code security, AI coding tools, AI investment ROI, AI-generated code, application security, automated code review, code quality, code review, codebase visibility, compliance, dependency risk, developer productivity, devsecops, Engineering leadership, engineering metrics, engineering ROI, production incidents, pull request review, SCA, software composition analysis, software delivery, software development productivity, software governance, technical debtAI coding boosts velocity, but without stronger review, governance and codebase visibility, teams risk higher costs, security gaps and production failures. TL;DR ...
