Maturing Your Application Security Program - A Practical Guide to Next Steps
Discover practical steps to advance your AppSec program through three maturity levels, with actionable strategies for immediate security posture improvement based on experience with 400+ companies.
Software Supply Chain Security - Transforming Challenges into Improved Open Source Software
Discover practical strategies for navigating software supply chain security challenges through community-driven approaches and developer empowerment in the open-source ecosystem.
DevSecOps - Real Life Security Incidents and Lessons in Software Development
Explore real-world cybersecurity incidents and discover crucial lessons about integrating security measures throughout the software development lifecycle to prevent vulnerabilities and attacks.
DevOps: من تويوتا إلى السحابة - رحلة التحول من التصنيع إلى الحوسبة السحابية
Discover the evolution of DevOps from Toyota's manufacturing principles to modern cloud computing, exploring Kaizen philosophy and AWS's core DevOps principles for modern software development.
Integrating AI Safely - Automating AI Failure Mode Testing in DevSecOps Pipelines
Discover how to automate AI failure mode testing in DevSecOps pipelines, ensuring secure AI integration through targeted strategies, metrics generation, and automated gates for enhanced application security.
From Novice to Catalyst - Scaling Security Tools with Metrics
Discover how to implement and scale security metrics effectively, from data extraction to visualization, while learning to leverage the Multivac framework for enhanced threat management and risk reduction.
Understanding Software Component Analysis (SCA) in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, demystifying their importance for protecting organizational assets and code integrity.
Simplifying Kafka Governance for Developers
Explore Kafka governance simplification using Klaw. Learn about architecture, approval processes, and practical demonstrations for efficient Kafka management in DevSecOps environments.
Cracking the Code of Cloud Security - DevSecOps and Container Security
Explore cloud security challenges, container vulnerabilities, and DevSecOps strategies. Learn automated vulnerability management, configuration best practices, and network segmentation for enhanced protection.
Modernizing Authorization: From Basic Roles to Decoupled ABAC
Explore the evolution of authorization systems, from basic roles to decoupled attribute-based access control (ABAC), addressing scalability and compliance challenges in modern software development.
LLM SecOps - Securing Large Language Model Applications
Explore LLM SecOps: from understanding and building LLM applications to addressing security challenges and implementing practical safeguards for robust AI-driven systems.
Traditional Security is Dead and Why That is a Good Thing
Explore how modern security teams implement continuous approaches, integrate with development, and achieve better results than traditional methods in platform engineering.
Unleashing Potential: The DevX Initiative at iA Financial Group
Découvrez comment iA Financial Group améliore l'expérience des équipes de développement grâce à l'initiative DevX, axée sur la maturité DevSecOps, l'ingénierie de plateforme, l'IA et le génie logiciel.
Unlocking Security Policies and Guardrails - The Bridge Between Dev, Sec and Ops in Kubernetes Deployments
Explore security policies and guardrails in Kubernetes deployments, bridging the gap between development, security, and operations teams for enhanced collaboration and protection.
SBOM: The Inescapable Way of Tracking Dependencies
Explore SBOM's role in preventing cyber-attacks, its formats, and implementation across the software development lifecycle. Learn to generate, manage, and monitor SBOMs for enhanced security.
Secure Kubernetes Manifests with Cosign and Kyverno
Explore open-source tools Cosign and Kyverno to secure container images and Kubernetes manifests. Learn implementation strategies for production clusters and essential use cases.
AppSec for Everyone
Explore key components and best practices for building robust application security programs, focusing on rapid implementation for organizations new to app development.
Simplifying IaC Security
Explore open-source tools for securing IaC pipelines, learn management techniques, and discover a new tool for simplified deployment. Gain insights on implementing security scans without disrupting existing workflows.
Security Incident Response in Cloud
Discover effective strategies for security incident response in cloud environments, covering key aspects and stretch goals for security teams.
Security Testing During Ideation: A Hackathon Perspective
Explore early-stage security testing in hackathons to minimize vulnerabilities, reduce costs, and improve code quality from the ideation phase.
Essential Features and Plugins for Enhanced WordPress Website Security
Discover essential WordPress security features and plugins. Learn to integrate proactive security practices into development, enhancing site integrity and resilience against evolving threats.