Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Open Source

wallarm

Top Open Source API Security Tools

Dec 23, 2024 By Wallarm In Wallarm
The modern world relies on Application Programming Interfaces (APIs). They allow applications to communicate with each other, servers, and consumers to facilitate data sharing and simplify application development. Without them, the internet would be unrecognizable. However, APIs also present a considerable risk to organizations. If left unsecured, they can be a gateway for attackers to access critical data and services. Protecting APIs is extraordinarily important, but it can be expensive.
Read Post

Rapid Bulk SCM Onboarding Made Easy with Polaris | Black Duck

Dec 18, 2024 By Synopsys In Synopsys
It is a constant challenge for modern app and DevOps team to onboard and scale AppSec test in today's highly complex and distributed software environment. Ability to automate bulk upload and scanning of an organizations' hundreds of repositories is the first step. This video shows how the Polaris integrated application security testing SaaS platform helps.
View Video
mend

Mend.io - Backstage Integration: Bringing Security Insights Where You Need Them

Dec 18, 2024 By Aurora Starita In Mend
Launched as an internal project by Spotify in 2016, Backstage was released under the Apache 2.0 open source license in 2020 to help other growing engineering teams deal with similar challenges. Backstage aims to provide a consistent developer experience and centralize tools, documentation, and services within a single platform.
Read Post

Introducing Black Duck Polaris with branching support | Black Duck

Dec 16, 2024 By Synopsys In Synopsys
Unlock the power of modern app development with the latest Black Duck Polaris Platform feature: Branching support. Developers can now seamlessly scan multiple branches, identify vulnerabilities, and eliminate any critical blind spot early in the development and DevOps process. Branching support provides more transparency and visibility into scanning activities, allowing more secure code to be developed across organizations.
View Video
Snyk

2024 Open Source Security Report: Slowing Progress and New Challenges for DevSecOps

Dec 3, 2024 By Jamie Smith In Snyk
Trust is the foundation of the open source community — but what happens when that trust is betrayed? When a backdoor vulnerability was found in a widespread Linux-based data compression tool, it nearly created an opportunity for malicious actors to seize control of countless computers worldwide. The vulnerability was introduced by a trusted contributor who, after years of building rapport with maintainers, ultimately exploited that trust.
Read Post
sysdig

Falco vs. Sysdig OSS: Choosing the Right Tool for the Job

Nov 26, 2024 By Nigel Douglas In Sysdig
The open-source ecosystem is rich with tools that empower developers and security practitioners alike. Two standout projects are Sysdig OSS and Falco, both of which leverage deep system-level instrumentation to provide insights and enhance security. However, while they share a common foundation, they serve distinct purposes. This blog explores the strengths of Sysdig OSS and Falco, how they differ, and how they can complement each other.
Read Post
aikido

Balancing Security: When to Leverage Open-Source Tools vs. Commercial Tools

Nov 15, 2024 By Mackenzie Jackson In Aikido
When deciding what approach to use for security tooling, it seems like there are two choices. Like everything in security, there is more to unpack in reality. In this article I want to explore when open-source security tools should be used, when commercial tools are more effective, and if we can trust tools built from an open-source core.
Read Post

Secure Python code faster with Code Sight: Real-time issue detection in Visual Studio | Black Duck

Nov 12, 2024 By Synopsys In Synopsys
Join David Bohannan, an R&D engineer at Black Duck, as he demonstrates using Black Duck's IDE plug-in, Code Sight to run static analysis on Python code within Visual Studio. Watch as Code Sight instantly detects vulnerabilities like OS command injection and cross-site request forgery while code is being written, helping developers fix issues early in the software lifecycle. David will demonstrate how leveraging Coverity's Rapid Scanning engine through Code Sight can allow developers to tackle issues such as secret scanning and ensure hardcoded secrets are flagged before they become risks to applications further downstream.
View Video

Copyright © 2024 OpsMatters™. All rights reserved.