How Adding Security into DevOps Accelerates the SDLC (Pt. 2)

Second part of our guided tour through the SDLC, focusing on the fundamental technology enabling DevOps: the CI pipeline. We will also touch on deployment orchestration, maintenance and incident response.

Guest Expert

16 Jul 2021 – 7 min read

DevSecOps

How Adding Security into DevOps Accelerates the SDLC (Pt. 1)

Part one of a deep dive into SDLC and how it evolved to become what we call DevOps. Let's find out how adding security actually accelerates it.

Guest Expert

8 Jul 2021 – 10 min read

Best practices

Security in Infrastructure as Code with Terraform — Everything You Need to Know

With DevOps, we try to manage our infrastructure using pure code. Since all our infrastructure is managed by code, the security of the code that actually manages the infrastructure is crucial. This article looks at how we can keep our infrastructure as code secure.

Guest Expert

25 Jun 2021 – 10 min read

DevSecOps

Initial Access Techniques - MITRE ATT&CK

This article discusses the 9 initial access techniques as outlined in the MITRE ATT&CK framework and provides examples of how attackers have used these techniques as well as preventative measures that can be put in place.

Guest Expert

8 Jun 2021 – 11 min read

Best practices

Data Security — an Introduction to AWS KMS and HashiCorp Vault

While Vault and KMS share some similarities, for example, they both support encryption, but in general, KMS is more on the app data encryption / infra encryption side, and Vault is more on the secrets management / identity-based access side.

Guest Expert

28 May 2021 – 11 min read

DevSecOps

An Introduction to DevSecOps - Tackling Security with DevOps & Why It Accelerates Your SDLC

This article introduces DevSecOps, making security part of the entire software development process. It outlines why having a DevSecops approach not only makes the software more secure but also why it can speed up the development process.

Guest Expert

10 May 2021 – 6 min read

CISO Roadmap

A Comprehensive Application Security Program - What should you include

Application security, known as AppSec, has become an extremely important part of the security program. This article looks at what makes a mature and comprehensive AppSec program.

Guest Expert

30 Apr 2021 – 8 min read

Cheat sheets

Rewriting your git history, removing files permanently [cheat sheet included]

Learn how to safely remove confidential information from your git repository. Whether you need to excise an entire file or edit a file without removing it, this tutorial will guide you through the process. Plus, get tips on preventing future headaches with GitGuardian!

Guest Expert

29 Jan 2021 – 10 min read