Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Developer's Essential Guide to Cloud Deployment Models

You’ll probably agree that there are barely any organizations left that don’t use some form of cloud computing in their daily operations. In fact, the cloud computing market is booming, with various sources expecting a worth of upwards of $600 billion within the next two years. And it makes sense: Cloud computing is the cheaper, scalable, easier-to-manage young cousin of yesteryear’s private server.

Application Security Debt - Warnings and Solutions

Jeff Martin, vice president of product for Mend, was recently interviewed by Michael Vizard from the Techstrong Group. In a fascinating conversation on application security debt, the two shed a spotlight on the insufficiencies of the current security stance of many companies and the budgetary pressures that might be influencing them.

Backup-as-a-Service using Ondat Snapshots with Cloudcasa

Kubernetes has challenges in managing storage, working out how to make persistent volumes ready for high-scale production workloads, and ensuring the data in those persistent volumes is protected. Watch this short video to see how CloudCasa and Ondat help you free your data and migrate workloads between Kubernetes providers. With a simple snapshot, backup and restore, you are ready to use Kubernetes to deliver the next generation of data intensive solutions for your business.

Secretless, Identity-based Infrastructure Access

Passwords are everywhere. Sometimes they are obvious — hardcoded in the code or laying flat in the file, but other times they take the form of API keys, tokens, cookies, or even second factors. Devs pass them in environment variables, vaults mount them on disk, teams share them over links, and copy them to CI/CD systems and code linters. Eventually, someone leaks, intercepts, or steals them. Because they pose a security risk, there is no other way to say it: passwords in our infrastructure have to go.

Using Containers Responsibly

Tools to package your applications and services into container images are abound. They’re easier to use and integrate into your CI/CD pipelines now more than ever. We can appreciate these advancements in the form of time savings and decreasing complexity when deploying to a cloud native environment, but we cannot completely ignore the details involved in these technologies. It’s tempting to take simplicity for granted, but sometimes we do this at the expense of keeping our software safe and secure!