Security Resources

Using Snyk to successfully roll out developer-first License Compliance

Almost all applications today rely on open source components. The vast majority of these include legal conditions in the shape of a license, and not complying with these licenses can lead to fines, lawsuits and reputation damage.

O'Reilly Securing Open Source Libraries

We all love open source for all the obvious reasons. But it can also become a complicated beast when it comes to ownership, trust, and security. As you operate your mission critical systems with the help of open source libraries, it is critical to understand and manage the easily exploitable vulnerabilities they introduce.

Building Your Kubernetes AppSec Strategy

Modern development teams increasingly use Kubernetes for deploying and managing application workloads, but often times application security on Kubernetes itself is overlooked.

DevSecOps Insights: A Puppet & Snyk Study

Puppet & Snyk’s recently released study is digging deeper into the trends of DevSecOps adoption. Has your organization adopted DevSecOps? 81% of survey respondents believe developers are responsible for open source security.

Secure Development During Digital Transformation

The digital transformation is a major change to your organisation and business. It means more software, and that means more software risk. The cloud means that your infrastructure is now part of your application, blurring the lines on who is responsible for security. And DevOps has accelerated the deployment of software.

The ROI of Open Source Security with Forrester

We all understand the necessity of application security, but sometimes struggle attaching their cost to financial benefit. To date, the quantitative outcomes from newer technologies such as open source security are less clear.

Using Snyk to Secure Your Kubernetes Configurations

Learning Kubernetes is a challenge by itself - making sure you’ve added all the relevant security controls in your YAML adds another layer of complexity. Snyk’s NEW Kubernetes configuration analyzer provides guidance and fixes in context, so it’s easy to understand the relevant controls and implement them in your Kubernetes code.

Securing containers by breaking in with DoIT International

Security issues and cybercrime are rising to an alarming rate. In this webinar, we became the hacker and exploited vulnerabilities in packages that exist in the wild that might be part of your containers today. We showed you how to protect yourself to these threats by building up a pipeline and development workflow with security testing in mind.

Demystifying DevSecOps

We’ve all heard of the DevSecOps and ‘shift left’ buzz that is often presented as go-to solutions that will better secure applications and nurture security awareness within your team. But once we’re told this is the future, how do we go about putting this into practice in a way that the whole team will adopt? What are the key values and principles that Developers and DevOps engineers expect?

Ask Me Anything: Advancing DevSecOps in 2020

As organizations embrace digital transformation and pursue competitive advantages, demands on delivering secure code fast increase. Join our speakers, all of whom have spent 2019 speaking with development, operations, and security teams, to break down DevSecOps beyond the term, in an open “Ask Me Anything” discussion.

Setting up open source security for your full Bitbucket workflow

Join Or Fattal, our very own product manger, to see how quickly you can bake security into your Bitbucket cloud/server. Watch Or demonstrate how Snyk gets setup across the SDLC - from code management and CI/CD (Bitbucket Pipelines) through to Jira for complete coverage.

DevSecOps Paving the Way for End-to-end Security

Join Alyssa Miller of Snyk, a hacker, security evangelist, cybersecurity professional and public speaker with almost 15 years in the security industry, and Will Robinson, a sales engineer and DevOps specialist at Trend Micro. They outline how to achieve end-to-end application security throughout the DevOps cycle by protecting applications in runtime and fixing vulnerabilities at the source.