Continuous OpenAPI Security Tests on Kubernetes with Testkube and ZAP
Learn to implement continuous security testing for cloud-native apps using ZAP and Testkube on Kubernetes, integrating with GitOps for efficient and regular product delivery.
Policy as Versioned Code - How to Do Day 2 Operations
Learn to manage organizational policies using software development patterns, enabling faster updates, easier compliance measurement, and risk mitigation that keeps pace with evolving threats.
Securing Serverless: AWS Lambda and Resilient Architectures
Explore practical approaches for integrating security in AWS Lambda architectures. Learn to handle sensitive data and implement automated compliance checks for robust serverless systems.
Humans are Hard, Code is Easy - DevSecOps Challenges
Explore strategies for effective communication and collaboration in DevSecOps teams, focusing on human interactions and relationships beyond technical skills.
Achieving a Higher Level of Security So You Can Sleep Better
Explore strategies for enhancing cloud security, addressing data protection challenges, and implementing robust DevSecOps practices to safeguard your organization's digital assets.
Sustainable API Management - Best Practices and Strategies
Explore sustainable API management strategies to enhance security, scalability, and efficiency in your DevSecOps practices.
Least Privilege: Security Gain without Developer Pain
Automated approach to implement least privilege security without impacting developer productivity. Combines data gathering and policy adjustment to remove unused permissions across applications.
Shifting Focus from Infrastructure to Platform Engineering and Developer Experience
Explore strategies to shift focus from infrastructure to platforms and developer experience, enhancing DevSecOps approaches and fostering continuous learning and community.
CI/CD Secret Management with Secret Zero - Managing Secure Pipelines
Explore effective secret management strategies for CI/CD pipelines, addressing challenges of token security, rotation processes, and permission controls in modern development workflows.
Real Zero Trust Security for Containerized Environments
Discover practical strategies for implementing zero trust security principles in containerized environments, from fundamental concepts to real-world DevOps implementation examples.
Setting the Standard - Safely Operationalizing OSS Contributions
Discover effective strategies for managing open source contributions in regulated environments while maintaining security and compliance standards for fintech organizations.
Automated Vulnerability Patching with Copa
Discover how Copa automates container vulnerability patching, enabling swift OS-level remediation without upstream rebuilds while streamlining security workflows for DevSecOps teams.
How to Scale Security without Sacrificing Safety
Discover effective strategies for scaling security operations while maintaining robust safety measures and protection protocols in cloud environments.
Reinventing Application Lifecycle Security Through Automation and AI
Discover how AI and automation revolutionize application security practices, enhancing SOC workflows and reducing false positives while maximizing operational efficiency in cloud environments.
Understanding CSRF and SSRF Web Security Vulnerabilities - Demo and Examples
Explore CSRF and SSRF web security vulnerabilities through practical demonstrations, understanding attack mechanisms, key differences, and essential prevention strategies for robust application security.
Empowering Developers to Embrace Security
Discover how to foster collaboration between security and development teams, enabling developers to make secure decisions from the start and build more robust applications.
A Day in the Life of a Base Image - Evolution of Vulnerabilities in Popular Containers
Explore container security evolution through data-driven analysis of popular DevOps images, vulnerability scanning challenges, and practical solutions for maintaining secure development workflows.
Building a Secure CI/CD Pipeline - Beyond Security Tools Integration
Discover effective strategies for optimizing security tools in CI/CD pipelines, moving beyond basic implementation to achieve meaningful security improvements and practical outcomes.
Security By Design
Discover essential principles and practices of integrating security throughout the software development lifecycle with guidance from security expert Ana Oprea.
DevSecOps Culture
Discover essential strategies for integrating security into DevOps practices, fostering collaboration between development and security teams for more robust software delivery pipelines.
Kubernetes Attack Simulation - The Definitive Guide to Security Monitoring and Detection
Master Kubernetes security monitoring and attack simulation techniques for effective threat detection and defense in containerized environments.