Author: Deborah Schalm

  • Venafi Adds Six Developers to Machine Identity Protection Development Fund

    accessec, APIIDA, Crypto4A, Difenda, EDJ Enterprises and Nous Infosystems latest developers to receive fund sponsorship

     

    SALT LAKE CITY – June 27, 2019 – Venafi®, the inventor and leading provider of machine identity protection, today announced direct sponsorship of six new developers in the Machine Identity Protection Development Fund, Venafi’s $12.5 million initiative to protect all machine identities. The funded developers will create integrations that accelerate the delivery of comprehensive protection for machine identities across complex enterprise networks. The Development Fund is a global initiative and will increase the visibility, intelligence and automation required for machine identity protection.

    “Cyberattackers have moved beyond stealing human identities, like usernames and passwords, and are now targeting the identities of machines,” said Kevin Bocek, vice president of security strategy and threat intelligence for Venafi. “Venafi invented the technology that protects machine identities, and we’re recruiting developers worldwide to deliver machine identity protection across the entire enterprise. With the Development Fund, Venafi is accelerating the protection of all machine identities.”

    The new developers joining the Machine Identity Protection Development Fund include:

    • accessec, trusted consultancies for CSOs, CISOs and CTOs on IT security issues, will use fund sponsorship to build a machine identity protection integration for industrial programmable logic controllers (PLCs). Until now, PLCs have not had a standard for machine identity protection due to a lack of standard software and interfaces. accessec will develop machine identity protection for PLCs connected to the Venafi platform. accessec is based in Germany and advises some of the world’s largest automotive brands.
    • APIIDA, a specialist in API, identity and access software solutions, will use fund sponsorship to build a direct integration with the Venafi platform and Broadcom Layer7 API Management (formally CA). APIIDA will also support the Venafi platform in the APIIDA API Gateway Manager delivering machine identity automation previously not available to Layer7 customers. Currently, API gateways operate as standalone instances and do not include automation for TLS machine identities. The APIIDA Gateway Manager makes it possible to automate TLS machine identities across multiple API gateways, allowing organizations to scale API services safely and securely. APIIDA is based in Germany.
    • Crypto4A, a leader in quantum-ready cybersecurity solutions, will use fund sponsorship to help organizations achieve the highest possible entropy and secure key storage and post-quantum ready PKI. post-quantum world where cryptographic systems cannot be trusted, including machine identities. As a result of Development Fund sponsorship, Crypto4A’s quantum ready HSMs will support the Venafi platform, including central key generation with Advanced Key Protect. In addition, Venafi platform customers will be able to issue privately trusted digital certificates from a CA built-into Crypto4A HSMs. Crypto4A is based in Canada.
    • Difenda, a global cybersecurity leader with experience helping companies manage risk and defend against cyber threats, is using fund sponsorship to develop a ServiceNow application for the Venafi platform. For enterprise users familiar with ServiceNow, the application will simplify the complete life cycle of machine identities with customizable request forms and orchestration workflows. Difenda’s ServiceNow solution will automate the entire process, from digital certificate requests to deployment, renewal and  provisioning of critical applications, such as F5 BIG-IP and Microsoft IIS. Difenda is based in Canada.
    • EDJ Enterprises, a leading developer of productivity solutions and PCI compliance tools for retail and grocery store environments, will use fund sponsorship to allow customers to automate the secure rotation of SSH keys for Toshiba 4690 controllers, which grant privileged access and remote administration, in point-of-sale (POS) systems. EDJ is the first Development Fund participant helping to secure SSH machine identities and is based in the United States.
    • Nous Infosystems, a leading global IT services provider with a fast growing ServiceNow practice, will use fund sponsorship to expand on its existing ServiceNow integration. Nous will make it easy for application owners to self-service machine identities without extensive training or onboarding, enabling Venafi platform customers to accelerate their machine identity protection strategy. The Nous solution for ServiceNow has been certified by ServiceNow and is available through the ServiceNow Store. Nous is based in the United States.

    The Machine Identity Protection Development Fund encourages recipients to build integrations that deliver greater visibility, intelligence and automation across any technology that creates or consumes machine identities, including:

    • Cloud and hybrid cloud infrastructure.
    • DevOps.
    • Containerization.
    • Secure Shell (SSH).
    • Code signing.
    • Robotic Process Automation (RPA).
    • Artificial intelligence, machine learning and big data analytics.
    • IoT.
    • Blockchain distributed ledger technology.

    To find out more about the Venafi Machine Identity Protection Development Fund and how you can become a funded developer, please visit: https://www.venafi.com/machine-identity-protection-fund.

    About Venafi

    Venafi is the cybersecurity market leader in machine identity protection, securing machine-to-machine connections and communications. Venafi protects machine identity types by orchestrating cryptographic keys and digital certificates for SSL/TLS, IoT, mobile and SSH. Venafi provides global visibility of machine identities and the risks associated with them for the extended enterprise – on premises, mobile, virtual, cloud and IoT – at machine speed and scale. Venafi puts this intelligence into action with automated remediation that reduces the security and availability risks connected with weak or compromised machine identities while safeguarding the flow of information to trusted machines and preventing communication with machines that are not trusted.

    With over 30 patents, Venafi delivers innovative solutions for the world’s most demanding, security-conscious Global 5000 organizations and government agencies, including the top five U.S. health insurers; the top five U.S. airlines; four of the top five U.S., U.K., Australian and South African banks; and four of the top five U.S. retailers. Venafi is backed by top-tier investors, including TCV, Foundation Capital, Intel Capital, QuestMark Partners, Mercato Partners and NextEquity.

    For more information, visit: www.venafi.com.

  • Finastra appathon challenges Fintechs and developers to deliver new solutions for community banks and credit unions

    Best apps will be judged by prestigious panel at Finastra Universe – Community Markets

    New York, June 27, 2019, Finastra has issued a challenge to Fintechs and developers with its first ever public appathon, inviting anyone with a good idea to build an application that solves a common pain point for North American community banks and credit unions, using its FusionFabric.cloud platform.

    Participants will use Finastra’s US Banking APIs, accessible for free on the FusionFabric.cloud platform, and will have their apps judged by a panel comprised of representatives from North American financial institutions, Microsoft and others. This appathon follows Finastra’s 48 hour hackathon in London, which saw over 100 developers from Fintech and tech firms code around the clock to produce 25 new apps.

    Teams must submit their apps by September 1, 2019. Ten teams will be shortlisted in the first round of judging, with three progressing to the final round where they will have the opportunity to present their app to a captive audience of hundreds of banks and credit unions at Finastra Universe – Community Markets. The winner will be decided by a panel of judges live at Finastra Universe – Community Markets in Chicago (#FinastraUniverseChicago).

    “This is an exciting opportunity for developers, Fintechs, and anyone who believes they can solve a common pain point in this market,” said Vincent Pugliese, SVP and General Manager, US Retail & Lending Solutions at Finastra. “Finastra works with more than 4,000 community banks and credit unions in North America, all of which are eager to deliver new and innovative products and services to their customers. FusionFabric.cloud makes this possible by blasting open the doors for collaboration between financial institutions, Fintechs, developers, students and others. We are providing access to Finastra’s core technology via open APIs to enable the creation of new banking experiences.”

    The North American community banks and credit unions have spoken, and these are the challenges they would like the appathon to address:

    • Saving and spending control – such as AI-based savings, bill-splitting tools, gamification
    • Personal financial management – such as account insights and analytics
    • New engagement channels – such as conversational banking and chatbots
    • Payment solutions – such as real-time payments, direct to merchant, P2P payments
    • Notifications – such as fraud detection and spending alerts

    For further information about the #Appathon visit:  https://www.fusionfabric.cloud/appathon

     

  • Compuware Advances Cross-Platform CI/CD with Machine Learning, Expanded Git Integration and Customized Expert Services

    DevOps Leaders Can Speed and Modernize Mainframe Software Delivery with zAdviser Analytics, ISPW Git Integration and ISPW Sentry Services

    -Compuware zAdviser’s enhanced machine learning leverages Compuware ISPW data to shine a spotlight on zones that should be prioritized for reducing technical debt or improving efficiency efforts.

    -ISPW Promotion Analysis builds confidence in code promotion and smooths the path to build and deploy modernization.

    -Expanded ISPW integration with Git improves the developer experience by standardizing CI/CD practices across the enterprise.

    -New ISPW Sentry Services program provides remote access to the highest skilled ISPW resources for administrative services.

     

    DETROIT, June 27, 2019 /PRNewswire/ — Compuware today announced new zAdviser analytics that enable application development and delivery teams to make data-driven decisions that improve mainframe software quality, velocity and efficiency, as well as ISPW enhancements and Git integration that modernize mainframe code pipelines.

    Advanced Analytics Build Confidence, Lead to Big Improvements

    Advanced analytics come from leveraging ISPW, the leading mainframe Continuous Integration/Continuous Delivery (CI/CD) solution along with zAdviser, a free service for Compuware customers that leverages machine learning to continuously improve mainframe software development and delivery outcomes. Customers can now marry their rich ISPW usage data with software delivery KPI data from zAdviser to understand how their teams work and where future resources can be applied most effectively.

    Through zAdviser dashboards, teams can visualize constraints in changing source code and focus their development efforts to better meet business and customer requirements, answering questions such as:

    • What modules are contributing most to our technical debt?
    • Where do we need to focus our code revitalizing and refactoring efforts?
    • Where are the constraints that, if improved, could have the biggest positive impact on improving future flow?

    More insightful developer productivity data helps teams answer questions such as:

    • How much time is spent developing and testing code?
    • How long does production-ready code wait before being promoted into production?
    • What’s the time difference between code first being checked out to it running in production?
    • How are regressions and fallbacks affecting development flow?

    “zAdviser’s ability to measure our current state helps us make decisions based on hard data and improve our software development and delivery practices,” said Tina Johnstone, Director, Mainframe Applications at Pacific Life Insurance Company.

    With zAdviser, ISPW customers now have a way to identify the code contributing to technical debt and determine immediate, optimal actions such as revitalizing and refactoring essential mainframe code on the platform or eliminating obsolete code. This allows them to begin taking small steps that build confidence and lead to big improvements in quality, velocity and efficiency.

    Build and Deploy Faster with ISPW

    ISPW is earning the hearts and minds of new customers at a volume not seen in the mainframe market in decades. The answer as to “why” can be seen in the innovative and preferred developer experience that has been continuously delivered over the last fourteen quarters.

    ISPW uniquely ensures customers’ mainframe code pipelines are secure, stable and streamlined throughout the DevOps lifecycle. Through an expanded Promotion Analysis feature, ISPW automatically identifies dependencies so that vast numbers of components can be deployed confidently.

    For example, if a copybook is changed, all related programs that have been compiled and are ready for promotion can be confirmed before deployment. Development teams can catch overlooked components and other issues early in the lifecycle, helping them avoid issues downstream in the CI/CD process. Ultimately, this accelerates build and deploy velocity on the mainframe and in cross-platform efforts.

    Improve the Developer Experience with ISPW Git Integration 

    Compuware’s continued “open borders” approach to DevOps enables customers to integrate our mainframe-focused tools into a multi-vendor, cross-platform DevOps toolchain of choice. In keeping with this approach, Compuware is announcing expanded integration of ISPW and Git, the version control software-of-choice for many distributed development teams.

    The integration helps developers with little mainframe experience work confidently with mainframe source code. Changes in Git are now automatically synchronized back into the mainframe where ISPW’s automated build, deploy and fallback capabilities can be leveraged in a CI/CD pipeline. By employing consistent methods for all code across all platforms, customers will gain consistent visibility into their diverse codebases and ease the process of managing code throughout the enterprise.

    “Reducing technical debt inherent in mainframe applications is essential for any organization looking to incorporate mainframe applications into their CI/CD pipelines,” said Jason Bloomberg, president of industry analyst firm Intellyx. “With the new analytics from zAdviser along with modern mainframe CI/CD tools like ISPW and its integration with Git, it’s possible to break down the silos separating mainframe development from the rest of the DevOps effort, thus reducing technical debt and extending the speed, quality, and collaboration benefits of CI/CD to the mainframe.”

    New ISPW Sentry Services

    Compuware is now offering a customized end-to-end service that leverages expert ISPW technical resources and proven best practices to provide ongoing administrative support of ISPW.

    ISPW Sentry Services provides remote access to the highest skilled ISPW resources for expert assistance with maintenance, upgrades and enhanced support services. The program is committed to meeting best-in-class SLAs across the world for a fraction of client’s current administrative costs.

    This marks Compuware’s 19th consecutive quarter of delivering mainframe customers the features and functionality they urgently need to improve mainframe software delivery velocity, quality and efficiency.

    “The modernization of mainframe software delivery to a state of high-performance is absolutely achievable, said Compuware CEO Chris O’Malley. “Companies can transform their most critical back-end platform by enabling a preferred developer experience, automating manual-process constraints, integrating with best-in-class tools and inspiring a culture of continuous improvement inspired and guided by software delivery KPIs of velocity, quality and efficiency.”

    Compuware Corporation

    Compuware empowers the world’s largest companies to excel in the digital economy by fully leveraging their high-value mainframe investments. We do this by delivering highly innovative solutions that uniquely enable IT professionals with mainstream skills to manage mainframe applications, data, and platform operations. Learn more at compuware.com.

     

  • SUSE Manager 4 Makes IT Transformation More Cost Effective and Secure as it Simplifies Management from Edge to Core to Cloud

    SUSE Manager for Retail 4 is also available, delivering open source infrastructure management tailored specifically for the retail industry

    NUREMBERG, Germany – June 26, 2019 – As more enterprises make the transformation to a more agile infrastructure leveraging hybrid and multi-cloud, the need for simplified, centralized infrastructure management continues to grow. SUSE® today announced the availability of SUSE Manager 4 and SUSE Manager for Retail 4 open source infrastructure management solutions. They help enterprise DevOps and IT operations teams reduce complexity and regain control of IT assets no matter where they are, increase efficiency while meeting security policies, and optimize operations via automation to reduce costs.

    “As SUSE helps enterprise customers transform to software-defined infrastructure so they can continue to innovate, compete and grow in today’s markets, we also provide the tools they need to efficiently manage and operate their mixed environments,” said Daniel Nelson, SUSE vice president of Products and Solutions. “SUSE Manager manages physical, virtual and containerized systems across edge, core and cloud environments, all from a single centralized console. It’s part of the IT transformation that lowers costs, reduces complexity and boosts business agility.”

    As a key component of a software-defined infrastructure, SUSE Manager 4 allows customers to:

    • Reduce costs and simplify management with enhanced content lifecycle management that makes it easier to move and manage packages throughout the DevOps cycle. Salt-based virtual machine management allows near real-time management of hundreds of servers.
    • Increase availability and visibility with expanded monitoring and alerting capabilities built on the next-generation Prometheus-based monitoring stack. This enables customers to easily identify and resolve issues.
    • Reduce complexity and regain control of complex heterogeneous IT environments with expanded operating system support and new SAP HANA deployment capabilities. They make it easier than ever to install and configure SAP HANA.

    Mary Johnston Turner, research vice president for Cloud Management at IDC, said, “Enterprises value the access to innovation provided by open source technologies such as Linux. Organizations that rely on multiple Linux distributions often face numerous management challenges as the complexity and scale of their enterprise environments increase. Consistent, automated configuration compliance and control is particularly important for maintaining the levels of performance and security demanded by mission-critical applications that serve large numbers of end users.”

    SUSE Manager for Retail 4

    SUSE Manager for Retail delivers open source infrastructure management that is optimized and tailored specifically for the retail industry. From mainframe and HPC clusters, bare metal servers, VMs, and containers to point-of-service and point-of-sale terminals, kiosks, and self-service and reverse-vending systems, SUSE Manager for Retail helps reduce costs, optimize operations and ensure compliance across retail IT infrastructure.

    SUSE Manager 4 is now available, and images are also available on Amazon Web Services, Google Cloud Platform and Microsoft Azure. For more information about SUSE Manager 4 and SUSE Manager for Retail 4, visit www.suse.com/susemanager and www.suse.com/retail.

    About SUSE

    SUSE, a pioneer in open source software, provides reliable, software-defined infrastructure and application delivery solutions that give enterprises greater control and flexibility. More than 25 years of engineering excellence, exceptional service and an unrivaled partner ecosystem power the products and support that help our customers manage complexity, reduce cost, and confidently deliver mission-critical services. The lasting relationships we build allow us to adapt and deliver the smarter innovation they need to succeed – today and tomorrow. For more information, visit www.suse.com.

     

     

  • ActiveState Automates Builds of Custom Python and Perl Runtimes for Windows

    ActiveState Platform eliminates Windows build complexity for Python and Perl developers

    VANCOUVER, British Columbia – June 26, 2019 – Windows users struggle with challenges when it comes to build environments, compilers, library clashes, runtimes and other incompatibilities. To make it easier for developers using Windows to create custom Python and Perl runtimes, ActiveState today announced enhancements to its software-as-a-service (SaaS) offering.

    The ActiveState Platform incorporates more than 20 years of build engineering expertise in order to automate much of the complexity associated with building, maintaining and sharing Python and Perl runtimes. Developers can create a free account on the Platform here: http://bit.ly/2Xg210y

    Unlike Python and Perl offerings that range from basic distributions to “one size fits all” runtimes, the ActiveState Platform allows users to automatically build minimal runtimes specific to their project. The result is a runtime environment with a smaller footprint that uses less resources, and offers a decreased attack surface, enhancing security.

    Developers can use ActiveState’s command line interface, the State Tool, to automatically download and install their custom runtime into a virtual environment on any workstation with a single command. This ensures consistent development environments for the entire project team. The State Tool also can be used to simplify the updating of runtimes across all testing and staging instances in an organization’s continuous integration/continuous delivery (CI/CD) chain.

    The ActiveState Platform currently supports 64-bit versions of Windows 7 and Windows 10 for Perl 5.20+ and Python 3.5+.

    Jeff Rouse, vice president, product management, said: Incorporating our build engineering expertise, systems and build farm, the ActiveState Platform allows developers to automate the building of runtimes from our catalog of Python and Perl packages to suit the unique needs of their projects. With more than 50,000 registered users, the ActiveState Platform is fulfilling developers’ need for smaller, more secure runtimes that are easier to deploy and maintain.”

    About ActiveState

    ActiveState helps enterprises scale securely with open source languages and gives developers the kinds of tools they love to use. More than 2 million developers and 97% of Fortune 1,000 enterprises use ActiveState to support mission-critical systems and speed up software development while enhancing oversight and increasing quality. https://www.activestate.com

     

  • DevOps Institute Advances the Human Elements of DevOps with SKIL Framework

    DevOps Institute provides the skills, knowledge, ideas and learning needed to ensure the human elements of DevOps advance along with emerging processes and technologies

    DEVOPS ENTERPRISE SUMMIT – LONDON – June 25, 2019 — DevOps Institute (https://devopsinstitute.com/), today announced the SKIL Framework for advancing the human elements of DevOps. The SKIL Framework consists of 1) Skills to develop career growth; 2) Knowledge for DevOps understanding; 3) Ideas to spark innovation and, 4) Learning based on DevOps know-how. The pillars of ‘SKIL’ represents a holistic framework of knowledge, continuous learning and certification to advance professional careers, support IT transformations and meet the needs of the DevOps community.

    “We believe that DevOps success, for individuals, organizations and the industry at large, is based on human skills as much as it is technology,” explained Jayne Groll, CEO at DevOps Institute.

    “The SKIL Framework represents our holistic ecosystem of knowledge and learning that will continue to grow as we develop and curate the industry’s best thinking and make it readily available to the DevOps community. The thirst for DevOps skills and knowledge is incredibly strong.”

    DevOps Institute, together with practitioners, industry leaders and partners, has built a thriving community where members have access to the most innovative, inspirational and transformational DevOps content and certifications. Focused on both foundational and emerging DevOps practices and principles, it provides content and learning to advance professional careers, and inspire discussion, collaboration and transformation for the human elements of the DevOps success equation.

    As a global member-based association founded in 2015, DevOps Institute is the unifying force of an open and growing continuous learning community comprised of IT practitioners, education partners, consultants, talent acquisition and business executives. It helps advance professional careers and supports emerging practices within the DevOps community through accreditations, research, events and continuous learning programs. Its primary focus is providing the “human know-how” to modernize IT.

    The SKIL Framework includes four key elements for advancing the humans of DevOps:

    Skills: DevOps Institute has helped with the Upskilling of thousands of IT practitioners and professionals through enterprise-level and role-based accreditations and certifications curated by industry thought leaders. It rigorously researches and curates open-source values to help members build and navigate career paths and take advantage of exclusive job boards and opportunities.

    Certifications include: DevOps Foundation®, Certified Agile Service Manager (CASM)®, Certified Agile Process Owner (CAPO)®, DevOps Test Engineering (DTE)℠, Continuous Delivery Architecture (CDA)℠, DevOps Leader (DOL)℠, and DevSecOps Engineering (DSOE)℠ and are trademarks of the DevOps Institute, Inc.

    Knowledge: DevOps Institute helps guide organizations and members through research and premium thought-leadership content, videos, webinars, podcasts, eBooks, blogs and published articles. It is a trusted resource for all IT professionals interested in leveraging community-based principles to improve their personal and organizational performance. DevOps Institute led the research and analysis for the “2019 Upskilling: Enterprise DevOps Skills Report” (https://info.devopsinstitute.com/upskilling-report-2019) and will drive the overall research strategy for DevOps Institute’s future 2020 Upskilling Report. To access resources, visit (https://devopsinstitute.com/resources/).

    Ideas: DevOps Institute promotes dialogue and exploratory activities that illuminate the benefits of applying DevOps skills. It organizes idea-hackathons, peer-to-peer events and crowdsourcing to tap the next “big ideas” in DevOps. Members have access to relevant forums, LIVE & Virtual events and local MeetUps to network and foster ideas for success. DevOps Institute is launching local SKIL-Up events through its global ambassador program and will be hosting a Global SKIL-Up Day in October 2019. For more information, visit (https://devopsinstitute.com/devops-institute-skilup/).

    Learning: DevOps Institute promotes continuous learning and provides members with access to relevant content via webinars, online learning, podcasts, books, workshops and bite-size learning programs to support the continuous learning journey. DevOps Institute has unveiled is “Continuous Learning Minutes” to deliver a series of short “what is” videos by key industry leaders that provide definitions and explanations around some of the most commonly used terms and concepts associated with DevOps. To view the first series of Continuous Learning Minutes, visit: https://devopsinstitute.com/continuous-learning-minutes/

    Together, the SKIL framework provides the trusted resources needed to adopt and scale DevOps practices based on shared knowledge.

    For more information, visit www.devopsinstitute.com. To join as a free community member head over to https://devopsinstitute.com/become-a-community-member/

    About the DevOps Institute
    DevOps Institute is dedicated to advancing the human elements of DevOps success. As a global member-based association, DevOps Institute is the go-to learning hub connecting IT practitioners, education partners, consultants, talent acquisition and business executives to help pave the way to support digital transformation and the New IT.

    We help advance careers and support emerging practices within the DevOps community based on a human-centered SKIL Framework, consisting of Skills, Knowledge, Ideas, and Learning.  All of our work, including accreditations, research, events, and continuous learning programs – is focused on providing the “human know-how” to modernize IT and make DevOps succeed.

    # # #

  • SmartBear Announces Acquisition of Cucumber Ltd

    SmartBear Reinforces Its Commitment to Open Source Growth by Securing the Agile Development BDD Practices of Cucumber
    Somerville — June 25, 2019 —SmartBear, the innovator behind the industry’s highest impact tools to build, test, and monitor great software, today announced the acquisition of Cucumber Ltd., the most widely adopted leader in the Behavior-Driven Development (BDD) community and provider of open source test automation framework, “Cucumber.”

    For SmartBear, this latest news reaffirms its continued investment in open source (OS) communities, as the company already supports the industry-leading OS tools, Swagger and SoapUI. Alongside its best-of-breed SaaS offerings, this aligns with its mission of making open source tools available at any part of the software development lifecycle (SDLC).

    Cucumber OS tooling is already used by nearly a million developers and testers around the globe to enhance their agile development practices using BDD, and the Cucumber engine is known for its portability across platforms.

    “The Cucumber community can count on our continued support and focus on open source tooling,” said Christian Wright, Chief Product Officer and Executive GM at SmartBear. “Cucumber aligns perfectly with our philosophy of supporting OS. We’re excited to get as involved with the Cucumber community as we are with the Swagger and SoapUI communities.”

    The addition of Cucumber also strengthens the BDD value-proposition that SmartBear has been building since last year’s acquisition of HipTest, another platform for BDD. The combination of Cucumber’s Jam and HipTest product lines creates the most complete BDD offering available in the market and positions SmartBear as the leader in the growing BDD community.

    Not only does this help ensure the continued evolution of Cucumber’s leadership in the BDD thought arena and open test automation framework, it allows SmartBear and Cucumber to work closer together so they can find ways to help users at all stages of their agile/digital transformation. Users and teams can use it at any point of the SDLC – from automating their tests with Gherkin syntax, to already-mature agile teams adopting BDD to enhance their lifecycle/development processes.

    “Cucumber and SmartBear is a win-win,” said Aslak Hellesøy, founder of the Cucumber project and co-founder of Cucumber, Ltd. “Our team brings a wealth of knowledge and expertise to SmartBear and its quickly expanding HipTest product. This merger expands the SmartBear ability to extend quality throughout the SDLC. Being part of an organization so heavily invested in open source lets us dedicate more time and effort to maintain and evolve Cucumber. And it lets us support the growing number of users who already realize the value of test automation and BDD. Cucumber will remain an open source standalone product, and HipTest will integrate more closely with Cucumber.”

    “SmartBear’s Cucumber acquisition augments the company’s existing portfolio both for BDD and open source,” said Melinda Ballou, Research Director, IDC. “Cucumber’s breadth of adoption and the core practitioner and other expertise at the company should expand SmartBear’s solutions and opportunities for quality and DevOps products and strategy, assuming effective integration and execution with the merged companies and on-going commitment to and engagement with Cucumber’s vibrant open source community. Given SmartBear’s strong execution with prior acquisitions and complementary capabilities for the companies, we think this is an excellent choice for both.”

    About Cucumber Ltd. 

    Cucumber’s open source and commercial collaboration tools combine with world-class training and consulting to take your engineering teams’ performance to another level. With over 30 million downloads, Cucumber is the world’s no. 1 tool for Behavior-Driven Development. For more information, visit: https://cucumber.io/.

  • Unravel Data Announces Partner Program and New Executive Hire to Meet Demand for Cloud Migration and Data Operations Initiatives

    nravel Partner Ecosystem Encompasses an Expansive Network of Innovators to Help Businesses Optimize Their Data Systems and Future-Proof Cloud Migration Strategies

    PALO ALTO, Calif.,—June 25, 2019—Unravel Data, the only data operations platform providing full-stack visibility and AI-powered recommendations to drive more reliable performance in modern data applications, today announced the Unravel Partner Program, which brings together world-leading technology innovators that support Unravel’s mission to radically simplify the way businesses optimize the performance of their modern data applications and the complex pipelines that power those applications. The new program debuts with the appointment of Mark Wolfram as vice president of business development and partnerships, who will direct the program’s strategy and expansion.

    Unravel’s Partner Program ecosystem includes a robust list of brands including Informatica, Attunix, Dell and RCG Global Services to help their customers solve data operations challenges and optimize their cloud adoption plans :

    • Technology and Platform Partners:

    Unravel’s partnerships with leading cloud platforms, data management, data operations and analytics partners guarantee the performance, reliability and cost of data systems. Customers benefit from operationalized data application workloads and the ability to address performance and reliability challenges while in production. Opportunities for optimization are pinpointed to ensure that service level agreements are met and resources are optimized. And as data workloads move to the cloud and hybrid deployment models, Unravel can accelerate decision making while eliminating risk.

    • Solution Partners:

    Unravel’s partnerships with integrators and solution providers deliver validated data operations solutions to their customers to guarantee the performance, reliability and cost of their data systems either on premises or in the cloud. Customers benefit from access to highly differentiated Unravel technology to solve a variety of data operations and cloud migration challenges. Unravel’s training and support accelerates time to value, as does its direct and early access to product, engineering and go-to market teams for deal acceleration and collaborative support in solution design.

    “We share with Unravel the common goal of building a culture of innovation and helping customers benefit from all of their data, not just the data for which they have ready-made solutions or tools,” stated Rick Skriletz, Global Managing Principal at RCG Global Services. “Although it’s not a universal truth, we typically find the more data that can be brought to bear on a problem, the better the results. Our complementary solution sets – and tight integration between them – are geared to bring automation to big data workflows, which is the one need we most often hear from customers.”

    “It is a daunting task to migrate and optimize your data to the cloud as part of a digital transformation journey and yet we see a growing demand from our customers to do so from energy to financial services, manufacturing, government and retail,” said Matt O’Donnell, President of Cloud Services at Redapt Attunix. “The impetus of demand and complexity has set us on the path to partner with Unravel to offer our customers the sophisticated tools, support, vision and platform expertise they need to migrate with confidence, and from there monitor, manage and improve their data pipelines to achieve more reliable performance in the applications that power their business. Unravel’s compatibility and collaboration with leading platforms is a significant advantage to our customers who seek this synergy to deliver value to their customers.”

    Unravel’s ecosystem partners benefit from enablement, go-to-market and post-sales support. Exclusive technical and best-practices and sales and product training are made available to the partners. Partners can take advantage of opportunities that can help build their business through joint marketing activities, co-marketing collateral and registered partner lead and deal registration. Through the program, partners have access to tools and APIs for customer account management, workflow integration, global dedicated technical support, and recognition as an official partner in the Unravel community.

    Mark Wolfram, an accomplished technology executive with more than 20 years of experience in sales, business development, and management, leads the Unravel Partner Program. Wolfram brings a strong background in cloud and data analytics honed at Microsoft and Azuqua (acquired by Okta).

    “Unravel Data is a unique company that has given more than just lip service about how to address the immense challenges inherent when enterprises look to move data workloads to the cloud. It is actually taking the significant steps necessary to truly partner with businesses during this complex migration process and to ensure continuous availability of modern data applications,” said Mark Wolfram, vice president of business development and partnerships at Unravel Data. “Unravel has developed the industry’s only AI-powered platform for planning, migrating and managing modern data apps in the cloud. I passionately support Unravel’s approach and look forward to sharing my expertise as together we grow the Unravel Partner Program to serve more enterprises around the world.”

    To learn more about Unravel’s Partner Program, please visit: https://unraveldata.com/company/partners/

    About Unravel Data

    Unravel radically simplifies the way businesses understand and optimize the performance of their modern data applications – and the complex pipelines that power those applications. Providing a unified view across the entire stack, Unravel’s data operations platform leverages AI, machine learning, and advanced analytics to offer actionable recommendations and automation for tuning, troubleshooting, and improving performance – both today and tomorrow. By operationalizing how you do data, Unravel’s solutions support modern big data leaders, including Kaiser Permanente, Adobe, Deutsche Bank, Wayfair, and Neustar. The company is headquartered in Palo Alto, California, and is backed by Menlo Ventures, GGV Capital, M12, Point72 Ventures, Harmony Partners, Data Elite Ventures, and Jyoti Bansal. To learn more, visit unraveldata.com.

    Copyrights

    The name Unravel Data is a trademark of Unravel Data™. Informatica and Informatica World are trademarks or registered trademarks of Informatica in the United States and in jurisdictions throughout the world. All other company and product names may be trade names or trademarks of their respective owners.

    ###

     

  • Sumo Logic Launches Powerful Global Threat Benchmarking Service for Amazon Web Services

    New Global Intelligence Service for Amazon GuardDuty to Deliver Virtually Real-Time Actionable Insights to Benchmark, Prioritize, and Optimize Security Posture For AWS Workloads and Data

    REDWOOD CITY, Calif. – June 25, 2019 – Sumo Logic, a leading cloud-native, machine data analytics platform that delivers continuous intelligence, today announced at AWS re:Inforce 2019 the Sumo Logic Global Intelligence Service for Amazon GuardDuty to deliver virtually real-time actionable insights that allow customers to benchmark themselves against other adopters of Amazon Web Services (AWS) cloud infrastructure to further strengthen cloud security posture, improve threat detection, and enhance regulatory compliance. Sumo Logic will be showcasing the new service at AWS re:Inforce 2019 this week in Boston at booth #714.

    “In today’s hyper-connected world, organizations are facing rapidly evolving business requirements that demand them to completely rethink their architecture, IT environments and application stacks that comprise the backbone of their businesses,” said Bruno Kurtic, founding Vice President of Product and Strategy, Sumo Logic. “As a multi-tenant, cloud-native machine data analytics platform, Sumo Logic is uniquely positioned to deliver rich context into not only how our customers’ applications and infrastructure stack are performing and behaving, but also how that behavior and performance differs from best-in-class organizations. This level of insight helps customers identify unusual patterns, outlier events and key performance and risk indicators that impact application performance and availability, as well as critical threats that could adversely affect an organization’s environment, or worse, their customers.”

    The Sumo Logic Global Intelligence Service for Amazon GuardDuty analyzes globally active threats detected by the Amazon GuardDuty service to provide crucial insights and context into how an organization’s overall threat profile differs from industry peers and identifies rare or critical threats operating in the organization’s environment. For instance, Sumo Logic can detect and highlight threats that rarely occur globally but are actively operating inside a customer’s environment such as attempted communication with XorDDos malware or other threats that might otherwise be hidden underneath a mountain of more common events.

    “As a global consultancy, there are hundreds if not thousands of potential security threats and events that pass through our organization on any given day, making it a challenge to not only track, but prioritize how to handle these events,” said Philip Duldig, senior security analyst at ThoughtWorks. “As an early adopter of Sumo Logic’s Global Intelligence Service for Amazon GuardDuty, the biggest value we’ve experienced is the ability to get actionable insights to prioritize and benchmark rare or non-frequent security events from our AWS workloads so we can optimize our security posture. I also love that I can compare global benchmarking data with my local data, to see how we are stacking up.”

    The Sumo Logic Global Intelligence Service highlights critical differences between a customer’s overall threat profile and forward-thinking leaders that could be a result of misconfiguration, active intrusion or simply a lack of understanding or focus on specific attack vectors. With powerful data insights into how a security program is performing, AWS customers can easily identify abnormal activity directly in the Sumo Logic platform and take immediate action to resolve those security issues before they impact their business.

    “With the rise of DevSecOps and an ever-expanding global threat landscape, it’s more important than ever before for organizations to constantly monitor their environments and workloads for malicious activity,” said Dan Plastina, Vice President, Security Services, Amazon Web Services, Inc. “The Sumo Logic platform can complement Amazon GuardDuty’s existing threat insights, making it even easier for security teams to detect threats and improve their cloud security posture.”

    Using the Sumo Logic Global Intelligence Service for Amazon GuardDuty, customers can gain deep insight into their threat vectors to:

    • Benchmark: Provides additional insights into various threat vectors and attacks to benchmark against what is normal for these attacks, how many users have seen similar attacks, and what is most and least common across AWS users
    • Prioritize: Get the right priority around security events based on rare events
    • Optimize: Take action to improve security postures by triaging and prioritizing efforts toward specific alerts and security best practices

    The Sumo Logic Global Intelligence Service is an operational and security benchmarking service that leverages machine learning and statistical analysis to uncover global key performance indicators (KPIs) and key risk indicators (KRIs). These global KPI and KRI benchmarks allow organizations to measure their technology choice, performance, and behavior against the world’s leading adopters of new technologies, modern architectures and cloud infrastructures.

    “We developed the Sumo Logic Global Intelligence Service benchmark to help our customers accelerate the adoption of modern technologies such as cloud services and new application components that power their digital initiatives and differentiate them from the competition,” said Kurtic. “This not only sets a standard for our customers, but it also provides a clear line of sight into how to improve their current processes and programs to remain competitive in the digital era. That’s why we’re committed to broadening the breadth and depth of the Global Intelligence Service and look forward to providing benchmarking insights to every part of our customers’ development, operations and security management lifecycles.”

    Sumo Logic GIS for Amazon GuardDuty is now generally available to Sumo Logic customers. For more information, visit the Sumo Logic for Amazon GuardDuty page, or stop by Sumo Logic booth #714 at AWS re:Inforce in Boston this week for a demo and to chat with our experts.

    To learn more about the Sumo Logic Global Intelligence Service, check out the press release.

    Additional Resources

    • Learn how to quickly leverage and centralize visibility into the security of AWS environment
    • Download the 2018 “State of Modern Applications & DevSecOps in the Cloud” report
    • Sign up for a free trial of the Sumo Logic Global Intelligence Service for Amazon GuardDuty

    About Sumo Logic

    Sumo Logic is a secure, cloud-native, machine data analytics service, delivering real-time, continuous intelligence from structured, semi-structured and unstructured data across the entire application lifecycle and stack. More than 2,000 customers around the globe rely on Sumo Logic for the analytics and insights to build, run and secure their modern applications and cloud infrastructures. With Sumo Logic, customers gain a multi-tenant, service-model advantage to accelerate their shift to continuous innovation, increasing competitive advantage, business value and growth.

    Founded in 2010, Sumo Logic is a privately held company based in Redwood City, Calif. and is backed by Accel Partners, Battery Ventures, DFJ Growth, Franklin Templeton, Greylock Partners, IVP, Sapphire Ventures, Sequoia Capital, Sutter Hill Ventures and Tiger Global Management. For more information, visit www.sumologic.com.

     

     

  • First Commercial Certificate Authority To Augment Microsoft CA, Sectigo Manages Private and Public Certificates in a Single Platform

    Enterprise Private PKI Service Enables Issuance and Management of Digital Identities for DevOps, Mobile/BYOD, Email, Multi-Cloud, IoT, and Other Uses

    ROSELAND, N.J. – June 20, 2019 – Sectigo (formerly Comodo CA), the world’s largest commercial Certificate Authority and a provider of purpose-built and automated PKI management solutions, today announced its Private PKI service for issuance and management of SSL certificates, private PKI, and identity certificates for users, servers, devices, and applications. Sectigo Private PKI enables enterprises to augment or replace their Microsoft Active Directory Services (Microsoft CA) by managing non-Microsoft devices and applications, including mobile, Internet of Things (IoT), email, cloud, and DevOps, all in a single platform—making it the most flexible solution offered by a commercial Certificate Authority.

    Private PKI (Public Key Infrastructure) is an enterprise-branded Certificate Authority (CA) that functions like a publicly trusted CA but runs exclusively for a single enterprise. Sectigo provides private roots and subordinates capable of issuing end-entity certificates to internal applications. Certificates issued from a private CA are trusted only within the controlled environments of the enterprise’s infrastructure, partners, and customers. The Private PKI solution utilizes an existing Microsoft CA as a root to Sectigo, eliminating the need to provision a new root certificate.

    “With the explosion of applications managed outside the Microsoft stack, Microsoft Active Directory Certificate Service no longer addresses all critical use cases. Sectigo Private PKI delivers a managed PKI solution to alleviate problems associated with establishing and managing internal PKI,” explained Lindsay Kent, VP of Product Management, Sectigo.

    Augmenting Microsoft CA for Today’s Complex Environments

    Sectigo Private PKI is a capability of Sectigo Certificate Manager, a platform that enables enterprises to productively manage private certificates and adhere to corporate and industry compliance standards. This control center automatically delivers certificates across the enterprise through industry-standard enrollment protocols. Administrators can discover previously issued certificates and then issue, view, and manage all certificates from a single platform—avoiding the risks, errors, or hidden costs associated with manual installation and renewal.

    Microsoft’s automatic certificate management allows IT administrators to instruct desktops and servers to enroll and renew certificates without employee involvement. However, today’s enterprise has myriad applications that reside outside any Microsoft operating system, leaving administrators and employees to manually track, enroll, and renew certificates and keys. Through enrollment protocols such as SCEP, EST, ACME, and REST API, Sectigo Certificate Manager can provision certificates for all enterprise environments.

    “With Sectigo Private PKI, you can connect to the network or the Microsoft agent and the software automatically discovers all certificates, so that you can manage all of your certificates from a single dashboard,” said Bryan Seely, Senior Systems Engineer, IT Security, Lighthouse Global.

    Private PKI Scales for DevOps

    DevOps environments require high certificate volumes for the just-in-time needs of many computing processes that may live for just hours or minutes. Whether using self-signed CAs on Kubernetes clusters, issuing SSL/TLS certificates into Docker containers, or automating installation of public SSL certificates, today’s enterprises benefit from Sectigo’s ability to host secure offline roots for customer-premise subordinates embedded into DevOps tools.

    Because of the difficulty of setting up a private CA, many enterprises turn to free public certificates, only to run up against unworkably low certificate volume caps. In response, companies are increasingly using Sectigo Certificate Manager in conjunction with ACME to scale DevOps without such interference.

    Digital Identity Management for All Enterprise Applications

    Private PKI use cases extend well beyond DevOps. The service supports all necessary certificate types in a single SaaS application, providing strong digital identity across the enterprise with the assurance of best-of-breed PKI practices and security. Common use cases include:

    • Mobile/BYOD – Works with MDM vendors and on-device MDM capabilities to issue certificates across non-Windows devices running iOS and Android.
    • S/MIME for email – Industry-first Zero-Touch Deployment provisions the same S/MIME email certificate across multiple mobile and desktop devices without requiring user installation.
    • Multi-cloud computing – Trusted roots enable distribution among and repatriation between multiple cloud environments with full interoperability between workstreams.
    • IoT – High volume delivery and automated issuance, including supply chain provisioning and lifecycle operations, for deployed devices.
    • Windows login – Secure logins using Windows Virtual Smart Card or Windows Hello for Business.
    • Other – Sectigo Private PKI services can be used for networking gear, VPN access, WiFi access, client-side SSL authentication, and other use cases. For more information visit Sectigo’s Private PKI page.

    About Sectigo

    Sectigo (formerly Comodo CA) provides award-winning, purpose-built and automated PKI management solutions to secure websites, connected devices, applications, and digital identities. As the largest commercial Certificate Authority, trusted by enterprises globally for more than 20 years, and more than 100 million SSL certificates issued in over 200 countries, Sectigo has the proven performance and experience to meet the growing needs of securing today’s digital landscape. For more information, visit www.sectigo.com.

    ###