Tag: devsecops

What Are AWS Application Patterns?

Twain Taylor | November 7, 2019 | AWS, AWS Application Patterns, cloud-native, cloud-native apps, data management, devsecops, shift right, shift-left approach

The cloud-native approach is not just about compute power and cloud services. A “set it and forget it” attitude won’t work with cloud native; there are far too many moving pieces and ...

Survey Surfaces Uneven Approaches to DevSecOps

Mike Vizard | November 4, 2019 | devops toolchain, devsecops, open source, software development life cycle, survey, vulnerability scanning, ZeroNorth

A ZeroNorth survey shows implementing DevSecOps is rife with questions for many organizations, with no clear answers There’s general agreement that digital business transformation initiatives are driving an overall acceleration in the ...

Five Tips to Approach DevSecOps Training

Joseph Feiman | October 30, 2019 | application security, application vulnerabilities, cyberthreats, devsecops, SAST, security development practices, security training

Developers are on the front lines when it comes to protecting their organizations from cyberattacks. As we’ve seen with the hacks of Monster.com or the Fortnite vulnerability, 2019 has been a trying year for organizations who ...

Applying Secrets Management to DevOps

Tyler Reese | October 15, 2019 | devsecops, PAM, privileged access management, secrets management

DevOps has changed the way enterprises operate, allowing for quick and efficient product development. In order for companies to keep up with market competition, many companies that are not structurally prepared to ...

Trend Micro Partners With Snyk to Advance DevSecOps

Mike Vizard | October 8, 2019 | alerting, API, devsecops, shift left, Snyk, Trend Micro, virtual patches

Trend Micro today announced an alliance with Snyk through which alerts about vulnerabilities in open source code will be passed on to the tools Trend Micro makes available to apply virtual patches ...

WhiteSource Extends DevSecOps Reach

Mike Vizard | October 7, 2019 | CI/CD, continuous integration, devsecops, IDE, security, WhiteSource

WhiteSource has extended its platform that enables developers to more easily address application security issues to provide integrations with GitLab Core and integrated development environments (IDEs) based on the open source Eclipse ...

ESG Survey Sees Long DevSecOps Road Ahead

Mike Vizard | October 4, 2019 | devops, devsecops, ESG, security, survey

A study published by Enterprise Strategy Group (ESG) in collaboration with Data Theorem, a provider of tools for securing application programming interfaces (APIs) and mobile applications, finds that while a lot of ...

Survey: DevSecOps Easier Said Than Done

Mike Vizard | September 30, 2019 | circleCI, devsecops, DevSecOps adoption, Puppet, Splunk, survey

While there’s clearly a lot of interest in best DevSecOps processes, a survey of more than 3,000 DevOps practitioners suggests adopting DevSecOps will require a lot of patience and perseverance. The "2019 ...

Implementing DevSecOps Goes Beyond Technology

Chris Eng | September 25, 2019 | automation, data-driven, devops teams, devsecops, secure code, security scans

While technology is crucial for implementing DevSecOps, it is the people, processes and culture that drive it forward. As recently as last year, a survey found 58% of technology leaders cited existing ...

DevSecOps Becomes a Higher Cloud-Native Priority

Mike Vizard | September 24, 2019 | Cloud Native Security Summit, cloud-native, devsecops, ESG, survey

At the Cloud Native Security Summit, Enterprise Strategy Group (ESG) today revealed the results of a survey of 600 senior IT leaders that finds organizations are looking at DevSecOps as a way ...