Building an End-To-End DevSecOps Pipeline: AWS
In part 3 we cover general tools, services, architecture, and methods used to create a DevSecOps pipeline in AWS (Amazon Web Services).
Building an End-To-End DevSecOps Pipeline: Microsoft Azure
In part two, we will discuss building a secure DevSecOps Pipeline using the Microsoft Azure DevOps family of products and services.
Building an End-To-End DevSecOps Pipeline: An Overview
When building a DevSecOps Pipeline integrate security into the SDLC. improve development speed and security simultaneously…
SAST vs. DAST vs SCA: Which Application Security Testing Method Works Best?
Every testing tool and method used will have advantages and disadvantages including DAST, SAST, SCA, IAST and any other application security testing (AST) method. As your trusted experts, we will gather all the info we need and then provide a solution based on your organization’s SDLC needs.
OWASP Top 10 – #8 Insecure Deserialization
Coming in at #8 on the OWASP Top 10 List – 2017, Most Critical Web Application Security Risks is Insecure Deserialization. This vulnerability occurs when untrusted data is used to abuse the logic of an application or application program interface (API).
OWASP Top 10 – #9 Using Components With Known Vulnerabilities
Next, at #9 on the list, we have the use of components with known vulnerabilities. While this might sound easy to avoid, tight time constraints might cause developers to use whatever libraries it takes to get…
OWASP Top 10 – #10 Logging & Monitoring
With the recent growth of web-based applications, it is more important than ever to keep security in mind when developing or maintaining these applications. The Open Web Application Security Project (OWASP) has a list of…