Software Development
Refactoring a Live SaaS Environment
We decided to refactor and re-implement almost all of our back-end and UI. This is how we went through the design and implementation. You can experience the new design by trying ShiftLeft ...
U.S. Elections: Effectively Balancing Access and Security
For a Democratic Party desperate to unseat President Trump in November, the primary election process has been filled with large-scale technology failure, official miscalculations, voter annoyance and public embarrassment, not to mention ...
Sonatype: Fighting COVID-19 Together
The world is facing an unprecedented challenge with communities and economies everywhere affected by the growing COVID-19 pandemic. That's the bad news. The good news however is that the entire world -- ...
Security Compass CEO Sets DevSecOps Strategy
Security Compass, a provider of tools for streamlining risk analysis, has appointed Rohit Sethi to be its CEO after receiving additional funding from FTV Capital. Security Compass founder and previous CEO Nish ...
PSA: Beware of Exposing Ports in Docker
Docker is an awesome technology, and it’s prevalent in nearly every software developer’s workflow. It is useful for creating identical environments and sharing them between development, testing, production, and others. It’s a ...
“This is the New Op Model” – Why State Farm Sponsored ADDO, and the Results
Sonatype is among the many supporters of All Day DevOps (ADDO), the world’s largest conference for DevOps practitioners. Close to 40,000 people attended this year’s 24-hour event -- and 10% of them ...
A New Approach to Application Security Testing
If the appsec industry were to develop a better AST solution from scratch, what would it look like?As software, aka applications, microservices, and workloads, increasingly moves into the cloud, its protection has ...
ShiftLeft Ocular Identifies Business Logic Flaws 10x Faster than Manual Code Reviews
Today we’re announcing enhancements to Ocular that empower organizations to discover business logic flaws during application development 10 times faster than manual code reviews.Updates to Ocular include support for four new programming ...
NIST proposes Secure Software Development Framework
Ever since Bill Gates fired off his famous Trustworthy Computing memo in January 2002, developing secure software has been a hot topic of discussion. It was important before then, for sure, but ...
DevSecOps Makes a Difference, but Uptake is Slow
A new study touts the benefits of DevSecOps practice for improving security posture, but finds it is slow to catch on in many organizations. The survey released this month from Sonatype, CloudBees, ...
