Latest from Tony
The Best Approach to Help Developers Build Security into the Pipeline
Speed and agility are at the core of digital transformation and DevOps culture, and have quickly become a business imperative for organizations that want to remain competitive. Speed cannot come at the sacrifice of security, though. The pace of software development requires that security be baked into the code from the start rather than tacked […]
May 25, 2020 · 3 minAll articles by Tony Bradley
Showing 1–24Better Apps and Better Security When You Shift Left
Tens of thousands of people and hundreds of cybersecurity vendors descended on San Francisco at the end of April. While the RSA Conference was the primary draw, there are a number of peripheral events that go on throughout the week as well, such as the Cloud Security Alliance Summit, the CIO/CISO Interchange, BSides San Francisco […]
The Road Ahead for Security, DevOps Transformation
Qualys hosted its Qualys Security Conference 19 this week in Las Vegas. Hundreds of attendees from around the world have gathered at the Bellagio hotel to learn more about the current state of cybersecurity and what the future has in store. As you might expect, given the technology landscape today, many of the sessions and […]
Privileged Access Management at the Speed of DevOps
Privileged access management (PAM) is clearly a very important element of effective cybersecurity. PAM has been ranked number one on Gartner’s Top 10 Security Projects for two consecutive years, and it is number four on the CIS Top 20 Critical Security Controls. The struggle for many organizations, however, is they have also embraced DevOps culture, […]
The Challenge of Securing a Dynamic, Cloud-Based DevOps Environment
The tech landscape has fundamentally changed over the last decade. The steady migration from local data centers to cloud computing combined with the advent of DevOps and the rise of containers have taken what was a more or less contained and relatively stable environment and transformed it into a dynamic, constantly shifting ecosystem. At the […]
Effective Cloud Security Requires a Cloud-Native Mindset
Thousands of developers and cloud security professionals will fill the Moscone Center in San Francisco next week for the sold-out Google Cloud Next ’19 conference. Three days of breakout sessions and keynotes will immerse attendees in deep technical content and opportunities for hands-on learning. It’s all designed to help organizations embrace the cloud. A key […]
DevOps: Don’t Let Detection Be a Bottleneck for Security
AI and automation can help ensure DevOps security doesn’t impact performance The world revolves around software and internet-based applications—and speed is crucial. Users have very little patience for delays and will quickly jump to something else if performance lags. Organizations have embraced DevOps and containers in an effort to accelerate development and deployment of software […]
Speed Rules in Chef’s DevOps Survey
DevOps is all about streamlining and accelerating. Organizations that embrace DevOps are driven by a focus on maximizing the combination of efficiency and effectiveness—which explains why speed is the central theme of Chef’s “The State of Enterprise Applications” survey. Chef surveyed nearly 350 application and operations professionals in an effort to understand trends in DevOps, […]
Defend Against Phishing Attacks with EV Certificates
One of the most important elements of fishing is choosing the right lure or bait. The same is true when it comes to the malicious digital version—phishing. A phishing attack requires good bait to be effective. Organizations can defend against phishing attacks and help protect customers by using EV certificates to verify the authenticity of […]
A Matter of Trust: Survey Examines Impact of EV Certificates
When it comes to interacting online, everything is a matter of trust. Spam emails and clever phishing attacks make it more challenging to determine what’s legitimate and what isn’t and have put businesses and consumers on edge. Without trust, customers are reluctant to share sensitive information or conduct transactions online. According to a recent survey, […]
Survey Finds EV Certificates Impact User Confidence, Revenue
Do consumers notice or care when a site is more secure? Is it worth the extra cost for a company to invest in the more strenuously verified Extended Validation (EV) certificate? devopsy.kinsta.cloud conducted a survey to explore these questions and determine what, if any, impact an EV certificate has on consumer behavior and spending. The […]
Can EV Certificates Improve Brand Value and Increase Trust?
Most people know the difference between a website that is completely insecure and unencrypted and one that offers an encrypted session for security. You simply look for whether the URL starts with HTTP and the address bar displays an open padlock, or the URL starts with HTTPS and shows a locked padlock. Within the realm […]
451 Research Report Highlights Value of DevSecOps for the CI/CD Pipeline
One of the compelling benefits of DevOps for many organizations is speed. Between breaking down silos, streamlining processes and automating routine tasks, the process of developing and deploying software can be significantly faster. A new report from 451 Research and Synopsys, however, points out the value of incorporating DevSecOps in the equation, especially with continuous […]
Simplify DevSecOps with a Zero Trust Approach
There are major cyberattacks and data breaches weekly, if not daily. Each incident is unique in some way, but one element common to almost all successful attacks is trust. Whether it’s a disgruntled employee conducting an insider attack, an attacker infiltrating the network using stolen credentials or an exploit that leverages a third-party vendor or […]
Why Your Software Supply Chain Might Be Your Achilles Heel
Historically, cybercriminals are as lazy as they are innovative. They can come up with clever exploits and attack vectors, but they still generally focus on the low-hanging fruit in the most target-rich environments. Recently, attackers seem to have shifted focus away from directly targeting companies with strong security or a wealth of resources, instead going […]
DevOps Careers: Report Examines What It Takes To Be an SRE
Do you want to be a site reliability engineer, or SRE? Sixteen years ago, the role didn’t actually exist, but now you can find more than 1,000 opportunities for a career as an SRE on LinkedIn. Before you decide if you want to explore such a career, though, you should check out the new survey […]
Automation Levels the Playing Field for Continuous Compliance
At this point, I doubt there is any company doing business anywhere that doesn’t fall under at least one compliance framework. One universal truth of compliance—in intent, if not in practice—is that it is a process, not an event. Checking boxes and passing an audit is a requirement of most compliance mandates, but the real […]
Manage Cloud Clutter with Better DevOps Hygiene
One of the core principles of DevOps is automation. Continuous development, deployment, monitoring, security and every other element of a continuous DevOps life cycle depends on as much of the underlying tasks and actions being automated as possible. Although the provisioning, scaling and decommissioning of most DevOps resources in the cloud are handled by automated […]
Cloud Generation Firewalls are the New ‘Next Generation’
There’s a new kid on the block—or a new firewall, at least. Traditional network and security technologies generally don’t translate well to a cloud environment. Next-generation firewalls might have been “next generation” when they were introduced, but now they’re “previous generation”—legacy technology that isn’t capable of doing the job effectively in the cloud. The new […]
In DevOps, Figure Out Why Before Considering How
It has been fairly well-established that DevOps is primarily a function of the underlying culture—about breaking down barriers and shifting roles so that teams and individuals are empowered to come up with innovative ideas and execute them without the burden of traditional corporate bureaucracy. It is also understood that there are a variety of tools […]
BrowserStack Offers Free Microsoft Edge Browser Testing
Testing is a major element of development. Without effective testing, you’re essentially releasing beta software and forcing your customers to be the guinea pigs in discovering any flaws or issues. But Microsoft is making it easier for developers to test how things behave and execute within the Edge browser, thanks to a new partnership with […]
Chef Report: DevOps Feeds the Need for Speed
“I feel the need … the need for speed!” ~ Maverick According to a recent report from Chef, one of the driving motivations for companies is based on this Maverick quote from the movie “Top Gun”: The need for speed. Getting better products to market faster is a competitive advantage that gives companies an edge […]
Atlassian Tightens Security for Bitbucket
Collaboration is part of the foundation of developing code in a DevOps environment. The ability to share code or leverage snippets from open-source projects enables developers to be more productive and efficient—creating better software, faster. Sharing code with others doesn’t necessarily mean you want it exposed to the public, though, which is why Atlassian recently […]
Gain a Competitive Edge with DevOps
DevOps has attained mainstream status. It is no longer a cutting-edge concept that only startups and progressive companies embrace—it’s a business imperative that delivers a significant competitive edge. If you want evidence of the impact of DevOps, take a look at the 2016 State of DevOps report. But what is it about DevOps that gives […]