DevOps.com

Where the world meets DevOps

Recent Articles

200 Billion Downloads Can’t Be Wro…

200 Billion Downloads

Bridge the DevSecOps Experience Divide w…

DevSecOps Experience Divide

451 Research Report Highlights Value of DevSecOps for the CI/CD Pipeline

by 0 Comments

DevSecOps for the CI/CD PipelineOne of the compelling benefits of DevOps for many organizations is speed. Between breaking down silos, streamlining processes and automating routine tasks, the process of developing and deploying software can be significantly faster. A new report from 451 Research and Synopsys, however, points out the value of incorporating DevSecOps in the equation, especially with continuous […]

Simplify DevSecOps with a Zero Trust Approach

by 0 Comments

There are major cyberattacks and data breaches weekly, if not daily. Each incident is unique in some way, but one element common to almost all successful attacks is trust. Whether it’s a disgruntled employee conducting an insider attack, an attacker infiltrating the network using stolen credentials or an exploit that leverages a third-party vendor or […]

HashiCorp Extends Secrets Management Reach

by 0 Comments

Secrets management is core to DevSecOps—how credentials are managed can make all the difference in preventing an application from being compromised in the first place. The challenge is making it as simple as possible for developers to access where most of those credentials are stored in the enterprise. HashiCorp this week released an update to […]

Early Automation: A Key Requirement for DevSecOps Success

by 2 Comments

Early Automation DevSecOps SuccessAccording to the “2017 DevSecOps Community Survey,” by Sonatype, almost 60 percent of the respondents consider security to be an inhibitor to DevOps agility, while more than 50 percent of developers say they do not have sufficient time to allocate to security. Hence arises the need for enhanced security automation in DevOps. Security automation helps […]

DevSecOps: Don’t Invest In Hope

by 0 Comments

DevSecOps Don't Invest In HopeA successful DevSecOps approach is rooted in action, not hope. There is a lot of investment in hope. I hope we won’t get breached. I hope our DevOps teams aren’t deploying thousands of vulnerable containers. I hope our developers aren’t downloading millions of vulnerable open source components. I hope our developers and security teams will […]

DevSecOps: Digging into Root Cause Analysis

by 0 Comments

DevSecOps Root Cause AnalysisWe have all been there in a postmortem when someone says, “Let’s get to the root of the problem.” And, we all know what that means: Who or what is to blame? We also all know that no one wants to play the blame game, yet we all do. But it isn’t our fault (no […]
DevOps.com