Happy Holidays! If you’re responsible for application security (AppSec) in your organization—and especially if your applications are written in Java—you received an early Christmas present this past weekend in the…
(Special thanks to our advisor Ram Kumar for his contributions to making this integration –and blog– possible!) One of the biggest challenges facing our digital economy is the security and…
When the showcase floor opened at KubeCon, a visitor walked up and said “What is ‘Continuous AppSec’ anyway?” Just over 600 days before our booth’s opening inquiry last week at…
This week at KubeCon + CloudNativeCon North America 2021, we announced the first major architectural upgrade to our Continuous Application Security Testing (CAST) solution, Deepfactor. This upgrade brought with it…
With support for Kubernetes v1.20 and v1.21, and several key enhancements to our Insights and Integrations – including a new Jenkins Plugin – DeepFactor continues to offer next-gen Continuous AppSec…
Deepfactor V1.8 Features Enhancements Core Platform Support for deploying Deepfactor on EKS Download BOM as CSV & PDF Hybrid libc containers support Support for Kubernetes 1.19 Specify environment when…
When a developer wants to know what an application they’ve developed is doing, there are a number of different techniques that can be used. But before I dive…
Over the last couple of years, we’ve had deep conversations with more than 100 organizations regarding current AppSec practices and plans for adding security into their DevOps pipelines. Based on…
What is an SBOM? A Software Bill of Materials, commonly referred to as SBOM, is a list of all components—including proprietary, open source, and 3rd party— in a…
Have you ever contemplated why some teams, whether they are sports teams or business teams or any kind of team, move from good to great? Is it luck or conscious…
Are there no observability tools purpose-built for developers? When meeting with our customers’ dev teams, I’m continually amazed that basically nobody I talk with needs much selling on the reasons…
A static code scanner is not sufficient in today’s DevOps-microservices-containers-world. You need RUNTIME observability into the application’s security, privacy, and compliance. Developers need to know if their code or a…
