The World Bank Group’s Cloud Journey With DevSecOps
Editor's Note: We are hosting DevSecOps Leadership Forum virtual events. Register to hear directly from leaders in London and North America. In this post, we cover what William Zhang, Andy Gao, and ...
Secrets, Security Insights and APIs!
Secrets, Security Insights, and APIs!ShiftLeft Inspect can now detect “hardcoded secrets” (across all languages), and provide “security insights” into your JavaScript code. ShiftLeft Inspect has also released a new version of API ...
The Science of Compliance: Early Code to Secure Your Node
This is a summary of Judy Johnson’s talk “The Science of Compliance: Early Code to Secure Your Node”. Watch the entire presentation below. We’re here to talk about the science of compliance ...
Continuous Contextual Authentication: Cybersecurity and Identity Converge in a Hybrid-cloud World
Authentication and authorization are broken. As an industry we’ve known this for a long time and the notion routinely emerges as “death of the password.” One might blame it on the definitions ...
Dev + Sec + Ops != DevSecOps
Dev + Sec + Ops ! = DevSecOpsDevSecOps formulaHistorically, security vendors and code scientists around the world have been looking for a single universal formula to represent the notion of DevSecOps.In my ...
The Challenge of Managing Identities in a Cloud-y IT Environment
In the era of DevOps, organizations must ensure their identity assurance strategy is ready to keep pace with the demands of cloud infrastructure ...
Making Everyone Visible in Tech
Jaclyn Damiano, Director of Digital Operations at a large telecommunications firm, talks with Sonatype's Justin Miller about raising the visibility of diversity within teams. Her research shows that there is still a ...
Incident Response Requires a New AppSec Model
Incident response found its way into our technological vernacular back in 1988 when the first internet worm—dubbed “The Morris Worm”—was released. In response, the Computer Emergency Response Team/ Coordination Center (CERT/CC) by ...
How to transition from DevOps to DevSecOps?
When does a DevOps team or a person become DevSecOps? Is it after they start using one or two security tools as part of their workflow? Or is it after they hire ...
Emerging from the Tool Swamp to a Unified AppSec Platform
Traditional approaches to application security (AppSec) rely on a patchwork of disconnected tools and processes that add high levels of friction to the modern software development life cycle (SDLC). A unified AppSec ...
