Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How do you build a successful AppSec program? Today, we’re focusing on an area where we have great evidence for a specific best practice – Repository Integration. Choosing where to deploy SCA scans can have a major impact on the success of your AppSec program. You can boost the value of Mend SCA by scanning in your repositories, and we want to show you how!

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks. With a proven track record of successfully meeting complex and large-scale application security needs, Mend.io is the go-to technology for the world’s most demanding development and security teams. The company has more than 1,000 customers, including 25 percent of the Fortune 100, and manages Renovate, the open source automated dependency update project.

Leading a security team can sometimes feel like you’re being asked to climb a mountain—without any equipment. There’s a lot on the line. You’re trying to stay on the right path, avoid obstacles, and report back your progress to someone who doesn’t even understand what mountain range you’re in. In other words, it’s a climb filled with frustrations and obstacles. We're here to equip you with the tools you need to conquer this security peak.

Organizations quickly adapted when they needed to suddenly support hybrid and remote workforces, often in inefficient and unsustainable ways. New technologies and new managed services can now help companies realize the full potential of SASE. In this roundtable discussion, you'll hear leading System Integrators and Service Providers talk about their clients’ top challenges and use cases, how that’s changed over the past three years, and where they see networking and security evolving over the coming years.

In this demo, see how you can use 1Password Connect to securely access your 1Password items and vaults in your company's applications and cloud infrastructure using a private REST API.

In this demo, see how you can use 1Password Service Accounts to automate secrets management in your applications and cloud infrastructure. Service accounts are ideal for shared environments because they provide an authentication method that isn't associated with an individual.

In this demo, see how you can integrate 1Password Connect with Kubernetes Secrets to access API keys, tokens, and other credentials saved in 1Password in your company's applications and cloud infrastructure.

In this demo, see how you can use the 1Password Connect Terraform Provider to access and manage items in your 1Password vaults.

In this demo, see how you can inject 1Password secrets as environment variables into a Kubernetes pod or deployment using either a 1Password Service Account or a 1Password Connect Server to retrieve items.

Microsoft 365 is a prime target for adversaries, with objectives ranging from credential harvesting to ransomware. However, managing detection rules can be a cumbersome task, especially as security analysts try to keep up with the ever-changing landscape of telemetry options from Microsoft.