devopsy.kinsta.cloud

Author: Deborah Schalm

  • JFrog acquires Shippable, Delivers Complete DevOps Pipeline Automation From Code to Production

    JFrog platform incorporates best-of-breed CI/CD technology to drive enterprise DevOps forward, provides users with an integrated DevOps solution

     

    SUNNYVALE, California, February, 2019 – JFrog, the DevOps technology leader known for enabling liquid software via continuous update flows, is announcing the strategic acquisition of Shippable, a continuous integration and DevOps automation platform company. Shippable’s portfolio of cloud-native and Kubernetes-ready CI/CD solutions will be incorporated into the JFrog platform, creating a complete, integrated DevOps pipeline solution.

    With expertise in CI/CD pipeline automation and a drive to make DevOps an “assembly line” for software development, Shippable technology provides a leap forward for JFrog’s DevOps platform, Enterprise+. Coupled with JFrog’s industry-leading artifact repository managementbinary management, distribution, and security vulnerability scanning solutions, Shippable technology will allow JFrog customers to automate their development processes from the moment code is committed through to production.

    “We’re immensely excited to welcome Shippable into JFrog, and eager to convert their expertise and products into unmatched value for JFrog customers,” said Shlomi Ben Haim, Co-founder and CEO of JFrog. “The modern DevOps landscape requires ever-faster delivery with more and more automation. Shippable’s outstanding hybrid and cloud native technologies will incorporate yet another best-of-breed solution into the JFrog platform. Coupled with our commitments to universality and freedom of choice, developers can expect a superior out-of-the-box DevOps platform with the greatest flexibility to meet their DevOps needs.”

    Following a Series D funding round of $165 million announced in October of 2018, JFrog’s acquisition of Shippable illustrates a promise to rapidly expand the JFrog technology portfolio across the DevOps pipeline. Coupled with the recent announcement of JFrog’s incorporation of VulnDB security intelligence data from Risk Based Security, JFrog is now offering the most automated, complete, open and secure DevOps solution in the market.

    “We’re thrilled to join the JFrog family and further the vision around Liquid Software,” said Avi Cavale, founder and CEO of Shippable. “Shippable users and customers have long enjoyed our next-generation technology, but now will have access to leading security, binary management and other high-powered enterprise tools in the end-to-end JFrog Platform. This is truly exciting, as the combined forces of JFrog and Shippable can make full DevOps automation from code to production a reality.”

    Founded in 2013, Shippable’s mission – complementary to JFrog’s Liquid Software vision – is to help companies ship code faster and focus on innovation by removing all friction in the software development and delivery workflows. Shippable employees will join JFrog global teams, with the first technology integrations being released in the JFrog Enterprise+ platform in the summer of 2019, with full technical integration completing in Q3 of 2019.

    About

    About JFrog – the Liquid Software Company

    JFrog is on a mission to enable continuous updates through liquid software, empowering developers to code high-quality applications that securely flow to end-users with zero downtime. JFrog is the creator of Artifactory, the heart of the end-to-end Universal DevOps platform for automating, managing, securing, distributing, and monitoring all type of binaries. JFrog products are available as open-source, on-premise, and on the cloud on AWS, Microsoft Azure, and Google Cloud. As the leading universal, highly available enterprise DevOps Solution, the JFrog platform empowers customers with trusted and expedited software releases from code-to-production. Trusted by more than 4,700 customers, the world’s top brands, such as Amazon, Facebook, Google, Netflix, Uber, VMware, and Spotify depend on JFrog to manage their binaries for their mission-critical applications. JFrog is privately held with offices across North America, Europe, and Asia. Learn more at jfrog.com.

    About Shippable:

    Founded in 2013 and backed by Madrona Venture Group, Shippable’s mission is to help their more than 400 customers ship code faster and focus on innovation by removing all friction in the software development and delivery workflows. With its hybrid automation platform, Shippable helps organizations easily achieve Continuous Delivery, optimize DevOps and enable Continuous Improvement. Shippable is Venture Capital-backed, with offices in North America and Asia.

  • Tricentis Scored Highest in Gartner 2018 Critical Capabilities for Software Test Automation for Enterprise End-to-End Testing and Progressive Web Apps/Responsive Web/Native App Use Cases

    This recognition follows Tricentis being named a Leader in the 2018 Gartner Magic Quadrant for Software Test Automation for the fourth year in a row

    Tricentis announced that Gartner’s Critical Capabilities for Software Test Automation recognized Tricentis with the highest product score for the Enterprise End-to-End Testing use case, as well as for the Progressive Web Apps/Responsive Web/Native Apps use case. Tricentis also received the second and fourth highest product scores for Intelligent Testing and Continuous Testing use cases, respectively.

    [Download the Critical Capabilities for Software Test Automation report now]

    “We believe that Tricentis’ position in the Critical Capabilities report—paired with our 4th consecutive recognition as a Leader in the Gartner Magic Quadrant for Software Test Automation—highlights why over 1600 enterprise customers have selected Tricentis as their partner for transforming software testing for Agile and DevOps,” stated Tricentis CEO Sandeep Johri.

    Tricentis was recently named a Leader in Gartner’s 2018 Magic Quadrant for Software Test Automation research report for the fourth consecutive year. Tricentis was also positioned furthest to the right on the completeness of vision axis for the second consecutive year. In its explanation of completeness of vision, the report notes, “Leaders having a Completeness of Vision are strong in their ability to reach the market via a compelling message and in delivering a solid solution globally. As enterprises engage in multiyear transformations involving agile, DevOps and bimodal practices, the ability of a vendor to create a vision of test automation that consistently creates value along the way and drives positive change will be crucial. The key messages now are around productivity and the ability to aid in technology and process transformation.”

    For details on Tricentis’ SAP testing and enterprise end-to-end testing functionality, see SAP Test Automation and SAP Testing Resource Center.

    About Tricentis

    With the industry’s #1 Continuous Testing platform, Tricentis is recognized for reinventing software testing for DevOps. Through agile test management and advanced test automation optimized to support 150+ technologies, we provide automated insight into the business risks of your software releases—transforming testing from a roadblock to a catalyst for innovation. The result is accelerated software delivery speed, improved cost efficiency, and reduced business risk.

    Tricentis is the only vendor to achieve “leader” status in all three top analyst reports (i.e., the “Triple Crown.”) This honor is based on our technical leadership, innovation, and a Global 2000 customer base of 1500+ companies, including global enterprises such as Allianz, ANZ Bank, Cisco, Dolby, Experian, First Data, HSBC, Merck, Office Depot, Samsung, Swiss Re, Starbucks, Telstra, UBS, Vodafone, Whole Foods, and WorldPay. Customers rely on Tricentis to achieve and sustain test automation rates of over 90 percent—increasing risk coverage while accelerating testing to keep pace with Agile and DevOps.

    Tricentis has a global presence in Austria, Australia, Belgium, Denmark, Germany, India, Netherlands, Singapore, Switzerland, Poland, United States and the UK. To learn more, visit https://www.tricentis.com or follow us on LinkedIn, Twitter, and Facebook.

    Source: Gartner Inc, “Critical Capabilities for Software Test Automation,” Joachim Herschmann, Thomas E. Murphy, Jim Scheibmeir, 18 December 2018.

    Gartner Disclaimer

    Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

     

  • InfluxData Secures $60 Million in Series D Funding to Bring the Value of Time Series to the Enterprise Mainstream

    Norwest leads round, emphasizing strong growth and market potential; former MongoDB CEO joins board of directors

    SAN FRANCISCO – February 13, 2019 – InfluxData, creator of the leading time series database InfluxDB, has raised $60 million in Series D funding, led by Norwest Venture Partners and joined by Sorenson Capital and existing investors Sapphire Ventures, Battery Ventures, Mayfield Fund, Trinity Ventures and Harmony Partners.

    The proliferation of data continues to grow, prompted mainly by the instrumentation of the virtual (e.g., Kubernetes, microservices) and physical (e.g., IoT sensors) worlds. As enterprises look for ways to achieve better results, gain new insights and grow their customer base, analysis of time series data is critical and is driving the need for purpose-built solutions. InfluxDB is the leading time series database – which has been the fastest growing database category over the last two years, according to DB-Engines, the industry ranking authority. InfluxData more than doubled revenue, new customer logos, and employees in 2018 and is positioned to accelerate momentum through 2019 and beyond. To date, most of the company’s growth can be attributed to great product-market fit, a developer-focused approach and demand from the open source community.

    “InfluxData’s time series vision is the future of data management,” said Rama Sekhar, partner at Norwest Venture Partners and new InfluxData board member. “Enterprises are experiencing a data revolution with massive increases in volumes of data. InfluxData is empowering enterprises to discover insights about their data by organizing it in the time dimension, a critical approach for use cases such as DevOps observability and IoT analytics. Developer support is also key in this space and the cult-following from the open source community signals a unique vision and value.”

    The new infusion of funds will support further investment in product innovation, with increased focus on the cloud, and building out sales and marketing programs to meet growing product demand, as well as customer support needs. InfluxData will begin to market its solutions for specific uses, including industrial IoT and network monitoring, and target industries such as e-commerce, gaming and financial services.

    “A majority of data is best understood in the time dimension, which is why time series data is the foundation of so many of today’s critical technology investments, including IoT, observability, machine learning and predictive analytics,” said Evan Kaplan, CEO of InfluxData. “The new funding will enhance our ability to deliver versatile solutions to countless companies looking to harvest insights from time and support our aggressive plans to scale the company. We’re also honored to have such esteemed individuals joining our board of directors to enhance our strategic direction.”

    “InfluxData has demonstrated consistent growth in a market with tremendous potential, which is why we’re strengthening our commitment in this round of funding,” said Anders Ranum, managing director at Sapphire Ventures and member of the InfluxData board of directors. “The company continues to innovate its technology, pushing the boundaries when it comes to time series data solutions and is transforming its business model to support current and future demand. There are great things coming from InfluxData.”

    InfluxData is also proud to welcome Max Schireson, entrepreneur in residence at Battery Ventures and former CEO of MongoDB, to its board of directors. Schireson brings a wealth of database industry experience, having led and advised cloud, big data and open source technology companies through hyper-growth transformational phases.

    InfluxData closed $35 million in Series C funding in January 2018, led by Sapphire Ventures and joined by Harmony Partners and existing investors Battery Ventures, Mayfield Fund and Trinity Ventures. Other past investors include Bloomberg Beta and Y Combinator.

     

    About InfluxData

    InfluxData, the creator of InfluxDB, delivers a modern open source platform, built from the ground up, for analyzing metrics and events (time series data) for DevOps and IoT applications. Whether the data comes from humans, sensors, or machines, InfluxData empowers developers to build next-generation monitoring, analytics, and IoT applications faster, easier, and to scale delivering real business value quickly. Based in San Francisco, InfluxData has more than 450 customers including Cisco, eBay, IBM and Siemens. For more information, visit www.influxdata.com. Twitter: @influxdb.

    About Norwest Venture Partners

    Norwest is a leading growth equity and venture investment firm managing more than $7.5 billion in capital. Since its inception, it has invested in more than 600 companies. The firm invests in early- to late-stage companies across a wide range of sectors with a focus on consumer, enterprise, and healthcare. It offers a deep network of connections, operating experience, and a wide range of impactful services to help CEOs and founders advance on their journey. Norwest has offices in Palo Alto and San Francisco, with subsidiaries in India and Israel. For more information, visit Norwest and follow on Twitter @NorwestVP.

  • DigiCert and Utimaco work on securing the future of IoT from quantum computing threats through collaboration with Microsoft

    Proof of concept lays a foundation for quantum-resistant digital certificates for IoT devices

    REDMOND, Washington, LEHI, Utah, AACHEN, Germany (February 12, 2019) — Today, DigiCert, Inc., the world’s leading provider of TLS/SSL, IoT and PKI solutions; Utimaco, one of the world’s top three Hardware Security Module providers; and Microsoft Research, a leader in quantum-safe cryptography, announced a successful test implementation of the “Picnic” algorithm, with digital certificates used to encrypt, authenticate and provide integrity for connected devices commonly referred to as the Internet of Things (IoT). This proof of concept provides a path toward a full solution, currently in development, that will protect IoT devices from future threats quantum computing could pose to today’s widely used cryptographic algorithms.

    Currently, most IoT devices use RSA and ECC to protect confidentiality, integrity and authenticity for device identities and communication. Experts from the security community, including Dr. Brian LaMacchia from Microsoft Research, predict that large-scale quantum computers capable of breaking RSA and ECC public-key cryptography will exist within the next 10 to 15 years. Although this might seem like a long time away, many devices such as connected cars, smart homes, connected cities, connected medical devices and other critical infrastructures will either live longer than this or will take longer to update.

    “DigiCert, Microsoft Research and Utimaco are collaborating today to solve tomorrow’s problem of defending connected devices and their networks against the new security threats that the implementation of quantum computers will unleash,” says Avesta Hojjati, Head of DigiCert Labs, the company’s R&D unit. “Together, we are leading the market with development of hybrid certificates that inject quantum-resistant algorithms alongside RSA and ECC to ensure long-term protection.”

    The certificates are issued by DigiCert using the Picnic quantum-safe digital signature algorithm developed by Microsoft Research. To implement this algorithm and issue certificates, DigiCert has used an Utimaco Hardware Security Module. The full solution, in development, would provide quantum-safe digital certificate issuance and secure key management, helping companies future-proof their IoT deployments.

    “The cooperation between DigiCert, Microsoft Research and Utimaco will help organizations implement secure and future-proof IoT products that are protected against the potential security threats of quantum computing,” said DigiCert CTO Dan Timpson.

    Enterprises will be able to cost-effectively deploy these solutions at any scale. Further, these companies will provide solutions and tools to manufacturers of IoT devices to remain prepared for quantum threats. The goal is to keep the sensitive information and high-value assets safe.

    “DigiCert, Utimaco and Microsoft’s successful test implementation provides a fundamental building block for the implementation of quantum-safe solutions,” said Dr. Thorsten Grötker, CTO at Utimaco. “Using these solutions, IoT manufacturers and other large organizations can innovate and develop products that are well prepared against coming quantum threats.”

    Brian LaMacchia, Distinguished Engineer and Head of the Security and Cryptography Group at Microsoft Research, said, “The work that Microsoft Research is doing with DigiCert and Utimaco is important to develop quantum-secure cryptographic algorithms, protocols and solutions today so that in the near future enterprises will be able to transition to and deploy quantum-safe cryptography. Working to ensure that their solutions are cryptographically agile will help companies avoid expensive and unscalable security practices to protect their IoT devices against future security threats.”

    About DigiCert, Inc.

    DigiCert is the world’s leading provider of scalable TLS/SSL, PKI solutions for identity and encryption. The most innovative companies, including 89 percent of Fortune 500 companies and 97 out of the 100 top global banks, choose DigiCert for its expertise in identity and encryption for web servers and Internet of Things devices. DigiCert supports TLS/SSL and other digital certificates for PKI deployments at any scale through its certificate lifecycle management platform, CertCentral®. The company is recognized for its enterprise-grade certificate management platform, fast and knowledgeable customer support, and market-leading security solutions. For the latest DigiCert news and updates, visit digicert.com or follow @digicert.

    About Utimaco

    Utimaco is an international provider of IT security solutions based in Aachen (Germany) and Campbell, CA (US). Utimaco develops hardware security modules and compliance solutions for telecommunication providers in the field of regulation. Utimaco is one of the world’s leading manufacturers in both technology segments. Over 220 employees are committed to the company´s goal to protect people, ideas and data and to create trust for the digital economy. Customers and partners value the reliability and long-term investment security solutions. Utimaco stands for recognized product quality, user-friendly software, excellent support and products that effectively meet market requirements. Find out more on www.utimaco.com.

     

  • IT Revolution Announces First Round of Speakers and Early Bird Registration for DevOps Enterprise Summit London 2019

    Now a three-day event, DevOps Enterprise Summit is the premier industry conference for business and technology leaders of large, complex organizations implementing IT transformation practices in the UK and Continental Europe
    PORTLAND, Ore., February 12, 2019 – IT Revolution (http://itrevolution.com), the industry leader for advancing DevOps, today announced the first round of speakers for DevOps Enterprise Summit London 2019 (https://events.itrevolution.com/eur/speakers/). Hosted at the InterContinental London – The O2 from 25-27 June, business and technology leaders are set to join industry practitioners and subject domain experts for three full days of immersive learning about IT transformation patterns and practices. Early bird registration is now available until 11 March 2019 for £950 + VAT, a savings of more than 30 percent off the full registration price.

    To register now and save on ticket pricing for DevOps Enterprise Summit London 2019, visit: (http://bit.ly/DOES19EUREB).  Early registration is highly encouraged, as the event is expected to sell out.

    The first speakers announced for DevOps Enterprise Summit London 2019 are:

    • Jason Cox, Director, Systems Engineering – The Walt Disney Company
    • Mik Kersten, Founder and CEO – Tasktop
    • Dr. Christina Maslach, Professor of Psychology, Emerita – University of California, Berkeley
    • Deepti Mutnuru, Senior Product Manager – Disney Streaming
    • Manuel Pais, Co-author of “Team Topologies – Organizing Business and Technology Teams for Fast Flow”
    • Mark Schwartz, Author, “War & Peace & IT – Business Leadership, Technology, and Success in the Digital Age”
    • Jonathan Smart, Partner, Enterprise Agility – Deloitte
    • Matthew Skelton, Co-author of “Team Topologies – Organizing Business and Technology Teams for Fast Flow”

    “The DevOps Enterprise Summit London is expanding to three days, hosting more than 80 speakers this year. They’ll be presenting their amazing experience reports and expertise that we need to help achieve our desired outcomes,” said Gene Kim, founder of IT Revolution and co-author of The Phoenix Project, The DevOps Handbook and Accelerate. “The DevOps Enterprise Summit is one of my favorite ways to learn. We connect with the leaders pioneering technology transformations in the largest and most complex organizations, spanning almost every industry.”

    What is the DevOps Enterprise Summit?
    Entering its fourth year in Europe and sixth year in the US, the goal of the conference is to accelerate DevOps adoption and increase the likelihood of those initiatives succeeding by enabling the cultural norms, technical practices, and architectures that help organizations achieve the highest levels of performance.

    Through keynotes, breakout sessions, collaborative workshops, and space to interact within an expo hall, attendees gain insights into the evolving technical and architectural practices, and the methods needed to lead widespread change efforts in large organizations. This year, the programming focus is on:

    • Experience Reports from Top Global Brands
    • Spanning the Business and Technology Divide
    • Next Generation Operations and Infrastructure
    • Overcoming Old Ways Of Working (e.g. Infosec, Compliance, ITIL, Project Management, Audit)
    • Dynamic Learning Organizations
    • Leadership Lessons, Transformational Leadership, Recognition, and Human Resources

    For more information about DOES19 London, please visit: (https://events.itrevolution.com/eur/).

    Share This: DevOps Enterprise Summit London 2019 Announces First Round of Speakers and Early Bird Registration https://events.itrevolution.com/eur/ @DOES_EUR #DOES19

    About IT Revolution
    IT Revolution assembles technology leaders and practitioners through publishing, events, and research. Our goal is to elevate the state of technology work, quantify the economic and human costs associated with suboptimal IT performance, and to improve the lives of technology professionals.

  • ‘Choose Your Own DevOps’ with Electric Cloud’s Application Release Orchestration Platform, ElectricFlow

    New persona-based UI tailors ElectricFlow’s Unified Platform to accommodate all DevOps use cases, provides users real-time access to critical information and displays responsibilities most relevant to a specific role 

     

    SAN JOSE, Calif., February 12, 2019 — Electric Cloud (https://electric-cloud.com/), the leader in Adaptive Release Orchestration and Continuous Delivery, today announced its ElectricFlow Winter 2019 Release. The platform now provides persona-based UI enhancements, new pipeline and release automation options, and new service catalog updates to streamline workflow and simplify onboarding to help companies start fast and adapt quickly. 

     

    For more information about ElectricFlow and to download the free Community Edition, please visit: (https://electric-cloud.com/products/electricflow).  

     

    ElectricFlow is unique in that it provides a single unified platform to support all DevOps use cases in one product, including application deployments, pipelines, release management, and DevOps Insight reporting. In ElectricFlow 9.0, we introduce a customized user experience for each DevOps role, with persona-based views. This provides a clear separation of duties for all DevOps roles, without requiring multiple products. 

     

    Companies of all sizes can now unlock the value of ElectricFlow even faster with a simpler and accelerated onboarding process. In turn, organizations can increase day-to-day efficiency and productivity for IT professionals by making the unified platform more user-friendly and personalized to each team member.  

     

    “Whether all companies realize it or not, their ability to prosper (or survive) relies on their ability to deliver high-quality software on business demand,” said Carmine Napolitano, CEO of Electric Cloud. “ElectricFlow is purpose-built to help drive business success by helping companies deliver IT in the easiest and most efficient way possible. Our unified solution doesn’t create more ‘tool silos’ within the enterprise, we make our shared DevOps and Continuous Delivery solution approachable for anyone. Connecting human capital to technology and process means that everyone can participate equally in an organization’s IT transformation effort.” 

     

    Choosing Your Own DevOps 

    The new persona-based customizable UI in ElectricFlow enables multiple users within an organization to tailor menus and options to their specific role. Putting this level of control in the hands of each user unlocks the value of ElectricFlow faster and gives everyone real-time access to the exact same information in a way that speaks to an individual’s responsibilities.  

     

    ElectricFlow now also includes an improved, customizable customer login experience that is more task oriented and intuitive. Users now also have the ability to add bookmarks/favorites for faster access to their desired pages, and easier access to personalized tasks and approvals.  

     

    With the addition of new, out-of-the-box release and pipeline templates, onboarding in ElectricFlow has never been easier or faster. Combined with enhanced pipeline and release triggers, the platform automatically kicks off pipelines and releases in a simple, easy way, based on user created events/triggers and code check-ins in Git. 

     

    As a way for an enterprise to retain unprecedented insight and control, an “approve by email” feature creates a one-click, secure and convenient solution for gate approvals and manual task completion directly from an email without having to log into the ElectricFlow platform. With RCC date ranges, teams also have the freedom to go back in time to compare releases and trends based on any date range with a user-friendly functionality similar to a DVR service.  

     

    Share This: New updates to @electriccloud ElectricFlow lets you “Choose your own DevOps” with #UI enhancements, pipeline and release automation options, and service catalog updates purpose-built to drive customer success https://electric-cloud.com/blog/2019/02/choose-your-own-devops-with-electricflow-winter-19 #DigitalTransformation 

     

    About Electric Cloud, Inc. 

    Electric Cloud helps software-driven companies like E*TRADE, GM, Hyundai, Intel and Samsung build and release applications and devices at any speed the business demands, with the acceleration, orchestration and insight needed to continuously improve their results. 

  • ShiftLeft Raises $20 Million Series B Funding to Accelerate Adoption of Automated Application Security

    Thomvest leads round with participation from Sinewave, Bain Capital Ventures and Mayfield; new advisory board includes prominent members of security and development community

     

    SANTA CLARA, Calif., Feb 12, 2019 – ShiftLeft™ Inc., an innovator in application-specific cloud security, today announced it has raised $20 million in Series B funding. This latest round, led by Thomvest Ventures and joined by new investor SineWave Ventures as well as existing investors Bain Capital Ventures and Mayfield, comes less than 18 months after the company announced its first round of $9.3 million, bringing the total raised to nearly $30 million. The company is also announcing the addition of Jim Sortino, who previously held executive roles at Trend Micro and Dome9 Security (acquired by Checkpoint), as vice president of worldwide sales.

    The company is using these funds to drive broader adoption of its code-informed runtime protection by expanding the breadth of its product portfolio, application coverage and global sales and marketing initiatives.

    Software is rapidly becoming the driver of innovation. From internal enterprise applications to connected systems and devices in markets such as automotive, HVAC and electronics, many industries now compete on the advantages and benefits their software delivers. Every facet of modern life has been impacted by software and the data collected has expanded massively. Traditional application security approaches simply cannot scale.

    “We are excited to lead ShiftLeft’s Series B financing. The company has an impressive team, led by CEO, Manish Gupta. ShiftLeft provides intelligent automation of code security, which addresses a major pain point for the CISOs of modern enterprises: to protect applications and data,” said Umesh Padval, venture partner at Thomvest Ventures. “ShiftLeft’s unique architecture provides a prioritized list of vulnerabilities with the least number of false positives and detailed vulnerability information, which helps developers remediate rapidly. A high-performance runtime solution that can protect applications in production empowers security teams to embrace automation as the solution which integrates seamlessly into the CI/CD [continuous integration/continuous delivery] workflow of an organization.”

    From containers and microservices to cloud and open source, a vast array of forces are rapidly changing and accelerating application development and deployment. This investment underscores both the importance of ensuring security despite this complex landscape, and ShiftLeft’s unique ability to empower application security teams to protect the enterprise. Unlike traditional application security approaches, which are focused on external threats and rely on manual efforts to triage inaccurate alerts, ShiftLeft is the first to use code analysis to deeply understand application vulnerabilities, and create a virtual security perimeter to detect and protect every application version against malicious or unauthorized activity targeted at those vulnerabilities.

    “Security has always been paramount, but traditional code analysis tools didn’t integrate into our CI/CD pipeline, created too many false positives and were just too slow,” said Harjot Gill, general manager of Nutanix Epoch. “The accuracy and speed of ShiftLeft enables Nutanix Epoch to automatically secure every release without slowing down new feature development.”

    According to Patricia Muoio, partner at SineWave and former chief of the NSA’s Trusted System Group, “We were particularly impressed by ShiftLeft’s combination of software assurance with runtime monitoring. This unique ability to not only automate code security, but also deliver the analytics that helps DevOps organizations understand, confirm and prioritize vulnerability patching enables enterprises to get ahead of threats and truly changes the game in cyber security.”

    As part of its growth initiative, ShiftLeft has also created an advisory board of prominent security and development thought leaders, including:

    • Bob Flores, former CTO of the Central Intelligence Agency
    • Craig Rosen, CISO of AppDynamics
    • Shahar Ben Hador, CIO of Exabeam
    • Aaron McKeown, head of security engineering and architecture at Xero
    • Manish Arya, founder and CTO of Tavant
    • Yonatan Ryabinski, chief enterprise architect at Vanguard

    ShiftLeft Quotes

    “Our founding vision is that application security needs to be a seamless part of the development process, not an afterthought,” said Manish Gupta, CEO and co-founder of ShiftLeft. “The problem has long been inaccurate tools and a heavily manual process, leaving security and development teams frustrated and applications vulnerable. ShiftLeft completely upends this paradigm, delivering automated and customized protection for every software release, and the analytics dev teams need to improve on the overall security posture.”

    “I’ve seen organizations struggle through a reactive, threat-focused security posture, resulting in overworked security teams and frequent breaches,” said Enrique Salem, partner at Bain Capital Ventures and former CEO of Symantec. “Yet ShiftLeft gets at the root problem – vulnerable software – by automating the process of accurately and rapidly analyzing and plugging vulnerabilities in the applications themselves. It’s exciting to be an investor in a company that is meaningfully helping security teams by reducing the overall attack surface and providing direct root-cause insight for developers.”

    “Every modern company has become a software company, making application security vital,” said Ursheet Parikh, partner at Mayfield. “So it’s no surprise security is daily news: as the volume and pace of new applications has skyrocketed, the number of vulnerabilities has exploded. The ability to customize security for each version of every application is what drew us to ShiftLeft, and why we think the company promises to have a remarkable impact on the overall market.”

    About ShiftLeft

    ShiftLeft is a continuous application security platform, purpose-built for the modern software development life cycle. It combines next-generation static code analysis (to quickly and accurately identify vulnerabilities) with application instrumentation (to protect the application) in an automated workflow. This combination of runtime-informed code analysis and code- informed runtime protection delivers the most accurate, automated, and comprehensive application security solution. To learn how ShiftLeft keeps application security in sync with the rapid pace of DevOps, see https://www.shiftleft.io/.

     

     

  • Skytap Announces Upcoming General Availability of First Self-Service, Public Cloud Capabilities for IBM i

    Skytap Cloud support for IBM i and integration with IBM PowerHA will deliver a comprehensive public cloud solution for AIX, IBM i, and Linux applications running on IBM Power Systems

    SEATTLE – February 11, 2019 – Ahead of IBM Think, Skytap, a global, purpose-built public cloud provider, today announced that its support for the IBM i operating systemwill be generally available in Q2 2019, followed by support for IBM PowerHA SystemMirror for AIX Enterprise Edition, which will become available in the second half of 2019. These new capabilities broaden Skytap’s unique value for migrating and running IBM i and AIX applications in the cloud with high availability.

    Skytap is focused on making it easy to build, run, and evolve traditional applications by rapidly migrating them to the cloud, enabling modern development practices, and integrating new cloud architectures. To accelerate enterprise migration and adoption of IBM i applications in the public cloud, Skytap has joined with Rocket Software, HelpSystems, and SyncSort. Together, Skytap and its partners deliver a strong ecosystem of technology, service, and implementation capabilities to drive successful adoption initiatives via Skytap’s public cloud offering.

    “Enterprises are currently operating application portfolios that could benefit from cloud migration but are ill-suited for hyperscale clouds. These portfolios often include large IBM Power Systems installations and present a complex challenge that major providers can’t solve,” said Karri Alexion-Tiernan, SVP of Product Marketing & Digital, Skytap. “Our priority is to help customers and partners address these challenges by charting a better path forward. These added capabilities continue to distinguish Skytap as the preferred public cloud for IBM i applications.”

    Skytap Cloud Offers Comprehensive Support for IBM Power Systems

    Skytap Cloud is purpose-built to accelerate the cloud migration of applications that run on a variety of operating systems, including AIX, IBM i, and Linux on Power Systems. Skytap’s IBM i support will be delivered with a diverse group of best-in-breed partners, providing end-to-end support for enterprises who are defining their modernization journey for IBM i and AIX-based applications in the cloud.

    Rocket Software is actively testing products in Skytap’s IBM i preview program, including its Rocket Aldon application lifecycle management (ALM) and DevOps solution suite. The combination of Skytap Cloud self-service environments and Rocket Aldon will deliver a comprehensive, on-demand solution for faster innovation and automation of IBM i application deployments.

    “Until we started working with Skytap, we did not have a public cloud option for our IBM Power Systems customers. We’re excited to join with Skytap to pioneer a path to cloud for IBM i and AIX, which will unlock significant value for customer applications that previously had no access to public cloud services,” said Daniel Magid VP, Solution Sales, Rocket Software.

    The First Public Cloud Offering of PowerHA for AIX

    Since announcing support for AIX on Power Systems in 2017, it has become clear there is demand for a cloud-based high availability and disaster recovery solution for AIX. With the inclusion of IBM PowerHA SystemMirror for AIX Enterprise Edition, Skytap will add support for these use cases from on-premises to Skytap Cloud and region-to-region within Skytap Cloud.

    “The ability to run PowerHA for AIX in Skytap Cloud shows a continued commitment to IBM Power Systems and addresses the needs of these critical AIX applications,” said Steven Finnes, IBM PowerHA Product Offering Manager. “Enterprises that have invested in AIX over the years are now looking for a path to the public cloud and Skytap Cloud provides a path forward.”

    Skytap Real-World Impact on Display at IBM Think

    Skytap is a Gold IBM Business Partner and will be demonstrating its new capabilities at IBM Think, Feb. 12-15, in San Francisco. Skytap will once again be powering multiple IBM Learning environments at IBM Think, supporting more than 3,000 hands-on labs including IBM Cloud Private, IBM Cloud Private for Data, PowerSC, and more for thousands of users, totaling 10,000 virtual machines and over 725 Terabytes of storage.

    “Skytap enables us to reliably scale our hands-on technical training for an event this size. We can create identical environment replicas hundreds of times with a click of a button, enabling us to offer real-time learning across our broad portfolio of technologies. It’s a win for both IBM and our customers,” said Erik D. Anderson, IBM Principal Architect, Digital Technical Engagement.

    In addition, notable companies will be presenting the value that Skytap Cloud has brought to their organizations and its capabilities for accelerating the migration and modernization of many applications, including:

    Skytap Powers Multi-Cloud Success with New Terraform Provider

    Multi-cloud adoption continues to accelerate as enterprise organizations adopt different cloud services best suited for specific workloads, and to avoid lock-in. Gartner predicts, “By 2021, over 75% of midsize and large organizations will have adopted a multicloud and/or hybrid IT strategy.”[1] Building on its ability to integrate with other cloud-native services through APIs, Skytap has released an open source provider for Hashicorp Terraform. Customers can now use Terraform to manage Skytap Cloud for traditional application workloads, including IBM Power Systems, alongside hyperscale clouds for cloud-native applications.

    Availability

    Skytap’s support for IBM i will be generally available in Q2, 2019. Support for IBM PowerHA SystemMirror for AIX Enterprise will follow in H2, 2019. Skytap’s Terraform provider is available today as open source code on Github along with documentation.

    Learn More

    About Skytap

    Skytap is a global public cloud purpose-built for modernizing traditional applications. Skytap Cloud makes it easy to build, run, and evolve these hybrid applications by rapidly migrating traditional workloads to the cloud, enabling modern development practices, and integrating new cloud architectures. We power multi- and hybrid-cloud strategies through secure connections to other clouds and on-premises data centers. Our environments technology accelerates application development, simplifies management, and reduces IT costs, enabling hundreds of customers worldwide to modernize at the pace of their business. www.skytap.com

    # # #

    [1] “Predicts 2019: Increasing Reliance on Cloud Computing Tranforms IT and Business Practices,” Gartner, December 2018

  • Open Mainframe Project Advances Modern Mainframe with Production Ready Zowe 1.0

    Less than 6 months after launch, this new Zowe release provides mainframes with new, intuitive, cloud-like interfaces 

    SAN FRANCISCO, February 11, 2019 – The Open Mainframe Project (OMP) announced today that Zowe, an open source software framework for the mainframe that strengthens integration with modern enterprise applications, is now production ready less than six months after launching. Any enterprise or solution developer can access the Zowe 1.0 source code or convenience build and incorporate it into their products or services with the agility and scalability of a cloud platform.

    Hosted by The Linux Foundation, the Open Mainframe Project is comprised of business and academic leaders within the mainframe community that collaborate to develop shared tool sets and resources. OMP launched Zowe, the first-ever open source project based on z/OS, last August to serve as an integration platform for the next generation of tools for administration, management and development on z/OS mainframes.

    Zowe 1.0 consists of core technologies enabling modern interfaces for web applications on z/OS, a new command line interface and expansion of platform REST API capabilities. This makes the z/OS environment more “cloud-like” and aims to improve integration in hybrid cloud environments.

    The Zowe framework provides interoperability and uses the latest web technologies among products and solutions from multiple vendors. It helps enable developers to use the familiar, industry-standard, open source tools to access mainframe resources and services. Since launch, there has been a huge community response with more than 1,700 beta downloads, 700 +members of the project’s communication tool (220+ daily active users) and more than 50 committers.

    “Mainframes are the foundation of businesses in every industry,” said John Mertic, Director of Program Management for the Linux Foundation and Open Mainframe Project. “Zowe breathes new life into mainframes and offers innovative possibilities for next generation applications. With Zowe 1.0, we’re developing secure, reliable and scalable computing that will ensure sustainability of mainframes for many years to come.”

    With the ever-increasing deployment of hybrid architectures, mainframes need to manage a bigger volume, variety and velocity of data and transactions. OMP is dedicated to modernizing the platform for mission critical apps and blockchain – where fast data access, transactional scale, and the highest level of trust are required. The Zowe framework is part of this mission as it will enable an ecosystem of software solutions intended to provide a simple, intuitive environment for a variety of IT professionals performing administrative, development, test and operation tasks on z/OS, and help onboard the next generation of mainframe users.

    Zowe 1.0 represents a major milestone on the project’s technical roadmap. Key features for this release include:

    ○      Functional extensions, integration between different 3rd party products and applications

    ○      Updated docs that define extension points and provide sample applications and tutorials on how to integrate with or extend the Zowe framework

    ○      New pre-install scripts that can help identify and verify the appropriate pre-reqs prior to beginning the Zowe installation process

    ○      A Zowe API Mediation Layer that provides the foundation for a single point of access for mainframe service REST APIs and an optional single sign-on experience that leverages an organization’s existing System Authorization Facility, or SAF protocols, enabling programs and applications to use system authorization services to control access to different resources

    Additionally, Zowe earned the Core Infrastructure Initiative (CII) Best Practice Badge, which means it is following best practices and conformance in driving secure software development and governance in open source. The Core Infrastructure Initiative is a collaborative, pre-emptive program and approach for strengthening cyber security that is widely supported by industry leaders like IBM, AWS, Google, VMWare and Cisco. The CII Best Practices Badge is a rigorous assessment of an open source project’s processes and infrastructure; other open source projects that has achieved the badge include Linux, Kubernetes and Node to name a few.

    The Open Mainframe Project will be on-site next week at THINK 2019 with several speaking sessions about Zowe and a happy hour. Visit the OMP website to learn more.

    Additional Resources:

    About the Open Mainframe Project

    The Open Mainframe Project is intended to serve as a focal point for deployment and use of Linux and Open Source in a mainframe computing environment. With a vision of Open Source on the Mainframe as the standard for enterprise class systems and applications, the project’s mission is to Build community and adoption of Open Source on the mainframe by eliminating barriers to Open Source adoption on the mainframe, demonstrating value of the mainframe on technical and business levels, and strengthening collaboration points and resources for the community to thrive. Learn more about the project at https://www.openmainframeproject.org.

    About The Linux Foundation

    The Linux Foundation is the organization of choice for the world’s top developers and companies to build ecosystems that accelerate open technology development and commercial adoption. Together with the worldwide open source community, it is solving the hardest technology problems by creating the largest shared technology investment in history. Founded in 2000, The Linux Foundation today provides tools, training and events to scale any open source project, which together deliver an economic impact not achievable by any one company. More information can be found at www.linuxfoundation.org.

    The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see its trademark usage page: www.linuxfoundation.org/trademark-usage. Linux is a registered trademark of Linus Torvalds.

  • Electric Cloud Accelerates Enterprise Digital Transformation Efforts with Banner Year in 2018

    DevOps industry recognition, community initiatives, and product innovation underpins a record year for Electric Cloud as company grows new business by 95 percent in 2018 

    SAN JOSE, Calif., February 7, 2019 — Electric Cloud (https://electric-cloud.com/), the leader in Adaptive Release Orchestration and Continuous Delivery, today announced a record year in sales growth in addition to several company milestones and achievements underpinning a momentous year in community and market leadership for DevOps and Continuous Delivery.

    More and more companies across every industry recognize the strategic importance of software delivery, and they are making big bets on digital transformation to increase their competitive edge. “The strong traction we’re seeing amongst global enterprises is a direct result of the technical innovation and award-winning solutions we deliver to customers in support of their digital transformation efforts,” said Carmine Napolitano, CEO of Electric Cloud. “Our customers are living proof that large, complex organizations can make gigantic strides in their digital transformations. High performance at this scale isn’t just for unicorns anymore.”

    The De Facto Standard in DevOps and Continuous Delivery

    Numerous notable customer wins across finance, insurance, high-tech manufacturing and hospitality capped off an exciting year for Electric Cloud, with new business growing at 95 percent in 2018, all while setting the company’s highest ever subscription net retention rate, approaching 115 percent. The market is voting with its actions as both existing customers and new customers are dramatically increasing their investment in Electric Cloud’s products.

    Electric Cloud’s ElectricFlow has become the de facto standard for application release orchestration for many organizations, including AdvancedMD, AGCO, E*TRADE, Samsung, TopDesk and Qualcomm because of its ability to:

    • quickly implement and share secure, repeatable and adaptable pipelines that deliver mainframe, monolithic and microservices applications
    • deliver unprecedented, actionable insight into the health and status of enterprise releases, without requiring manual data collection and analysis
    • reliably scale as DevOps processes are rolled out across entire organization

    Supporting the Shift to Modern Technologies

    In 2018, Electric Cloud joined the Cloud Native Computing Foundation, with the goal of helping enterprises modernize legacy applications and infrastructure through next-generation techniques, including PaaS, Multicloud, Microservices, Containers, CI/CD, and DevOps.

    “We’re excited to welcome Electric Cloud as a member of the CNCF,” said Dan Kohn, executive director of the Cloud Native Computing Foundation. “As enterprise adoption of cloud native continues to grow, we see continuous delivery and release orchestration as critical to leveraging these technologies. We’re glad to have CNCF members like Electric Cloud that can help enterprise businesses along their cloud native journey, particularly in ensuring security and compliance from development to production.”

    Electric Cloud University

    In 2018, Electric Cloud invested in numerous resources to help advance the DevOps community and state of software delivery around the world. It launched Electric Cloud University, an online learning system that makes it easier for teams to get skills and certifications on DevOps topics like continuous integration, deployment automation and release orchestration (see Electric Cloud Launches Extended DevOps Training and Certification Program In Partnership with DevOps Institute). In addition, the company became the Founding Sponsor of the ’2019 Upskilling: Enterprise DevOps Skills Report’ to help baseline and track DevOps skillsets across the global enterprise IT community.

    Leading From the Front

    In 2018, the company also received numerous awards and industry recognitions for its role in advancing DevOps and Continuous Delivery:


    About Electric Cloud, Inc.     

    Electric Cloud helps software-driven companies like E*TRADE, GM, Hyundai, Intel and Samsung build and release applications and devices at any speed the business demands, with the acceleration, orchestration and insight needed to continuously improve their results.