Security Resources

How Twilio Scaled through Dev-First Security and DevSecOps

As more organizations leverage cloud native technologies such as Kubernetes, IaC, containers and serverless – shifting left and adopting DevSecOps is a must-do. But how does it actually work in practice?

Stranger Danger Live Hacking Session

Modern cloud native technologies enable you to build, deploy, and scale rapidly. But this increased complexity exposes your application to new risks and vulnerabilities. Each layer of your cloud native application – spanning your code, third party dependencies, containers, and clusters – exposes you to new security concerns. And we’ll show you just how easy they are to exploit!

Integrating Security Automation in Modern Application Development Environments

Automating security has become fundamental to supporting the speed-to-market requirements of modern application development environments. Because these environments vary across teams and organizations, security tooling must be flexible enough to enable the adaptation of security automation based on specific workflows and needs. This extensibility minimizes friction, optimizes productivity and encourages developer adoption - key ingredients for the successful implementation of a DevSecOps model.

Docker Workshop: Breaking Containers to Improve Security

You’ve likely seen a vulnerability report from a container image, or at least read about the potential issues that can occur in containers - but have you wondered what a bad actor can do in your Kubernetes clusters if they find these vulnerabilities before you fix them?

Best Practices for Securing Modern Cloud Native Applications

The benefits of cloud native development are undeniable – from rapid deployments to scaling operations. However, modern cloud native applications both solve and introduce new security risks at each layer of the application.

How Shutterstock Implemented DevSecOps from the Ground Up

Shutterstock’s AppSec team knew this when implementing a DevSecOps strategy throughout their organization. Its global digital media platform is built heavily on cloud native applications; including containers, microservices, and Kubernetes. Securing it all, at scale, has been no small task. A big focus area of this transition has been the people. How engineers and security teams work together and how they deal with security issues in their software delivery pipelines.

Stranger Danger Live Hacking Session

Modern cloud native technologies enable you to build, deploy, and scale rapidly. But this increased complexity exposes your application to new risks and vulnerabilities. Each layer of your cloud native application – spanning your code, third party dependencies, containers, and clusters – exposes you to new security concerns. And we’ll show you just how easy they are to exploit!

Do You Trust Your DevSecOps Pipeline?

DevSecOps practices help build security and quality into the software delivery process by making EVERYONE responsible for security at every stage. But, how do you make sure your process is doing the right things?

Hacking the Security Footprint of Open Source Dependencies

Leveraging open source modules is a common way for developers to deliver complex functionality quickly. However, they also represent an undeniable and massive risk. You're introducing someone else's code into your system, often with little or no scrutiny. The wrong package can introduce severe vulnerabilities into your application, exposing your application and your user's data.

Integrate Security Early and Often for Successful DevSecOps

We hear many say push security left early in development. But developers are also pushing right, especially as they deploy applications using cloud and container technologies. On top of this, connecting and controlling remote product development teams often puts extra pressure on security and risk management tasked with ensuring end-to-end application security.

Building the Paved Road to Container & Kubernetes Security Advice from Docker Captains

Snyk is excited to share our virtual airwaves with Docker Captains - some of the top experts in the world of containers and Kubernetes! They’ve spoken at events all over the world, written books, delivered training and workshops, and contributed to the open-source community and code.

Panel Discussion: Maintaining Secure Development Practices in a WFH Environment

With the massive transition to a working from home (WFH) environment, we need to make sure we help and guide our remote development teams to work securely.