devopsy.kinsta.cloud

Author: devopsy.kinsta.cloud

  • Best Practices for Modern DevOps, Architectures and Operations – Webinar

    Best Practices for Modern DevOps, Architectures and Operations – Webinar

    Join CircleCI and AWS as we demonstrate how modern DevOps teams innovate faster while reducing risk and time to market. We’ll cover how teams utilize modern applications with modular architectural patterns, serverless operational models, and automated software delivery processes.
    High performing teams need the best tools to automate software development, scale quickly, and get to market faster with confidence in their code. In this webinar, we’ll show you how to utilize CircleCI and AWS to automate mission critical tools and architectures to achieve DevOps maturity. We’ll also demonstrate how to use CircleCI and AWS to implement continuous integration and deployment of your modern DevOps practices.

    Presentation Materials:

  • Global Next-Generation Software Engineering Conference

    Global Next-Generation Software Engineering Conference

    GNGSEC sounds the clarion call for software engineering change!

    The pandemic made 2020 the year where we see some of this decade’s most exciting digital technologies become commercially viable, and others finally go mainstream. Software is the core of digital transformation. In the digital era, the methods by which we produce software also need to be digitized. In the software engineering field, the adoption of AI, big data, cloud computing and cloud-native are accelerating the digitization for businesses.

    Global Next Generation Software Engineering Conference (GNSEC) focuses on a full range of software engineering technologies and is committed to defining the standard of the next generation of software engineering. The event will gather 1000+ Attendees and it will be live with virtual experience where senior software engineers, architects, and team leads connect, learn, and grow. Experts and developers from various backgrounds will be sharing their cutting-edge technical practical experience and cases.

    The majority of the attendees of this event will be from the Southeast Asia region (Singapore, Thailand, Indonesia, Philippines, Malaysia, Vietnam), India and China. Due to the current travel restriction, GNSEC 2021 will be virtually presented via Airmeet. It will offer attendees with virtual exhibitions, virtual conference, peer networking session, business matching session, virtual discussion group.

    Global Next Generation Software Engineering Conference (GNSEC) is co-presented by DAOPS Foundation and Escom Events. The event is part of digital innovation series events that features AI, DevOps, Cybersecurity and digital transformation. Previously the event was presented in Shanghai, Shenzhen, Beijing, California and Hong Kong.

    There will be more than 30 speakers from DBS Bank, ING, IBM, Daimler, Tencent, JD.COM, DevOps Institute, Gitlab, New Relic, SUSE and more to share ideas, experiences and case studies in software engineering.

    Register here to join​​ the event with us to rebuild software engineering.

  • Akamai Security Research: Financial Services Continues Getting Bombarded with Credential Stuffing and Web Application Attacks

    Akamai and WMC researchers scrutinized multiple phishing kits including  ‘Kr3pto,’ which has targeted customers of 11 UK banking brands 

    Cambridge, MA, May 19, 2021 — Akamai Technologies, Inc. (NASDAQ: AKAM), the  world’s most trusted solution for protecting and delivering digital experiences, today published  the State of the Internet / Security report: Phishing for Finance. The report provides an analysis  of both global and financial services-specific web application and credential stuffing attack traffic  — revealing significant increases across the attack surfaces year over year from 2019 to 2020.  

    The report also features a collaboration between Akamai and WMC Global researchers that  examined two specific phishing kits: ‘Kr3pto’ and ‘Ex-Robotos’. Kr3pto has targeted customers  of 11 UK banking brands, and Ex-Robotos has aimed its scams at corporate employees.  

    By The Numbers 

    In 2020, Akamai saw 193 billion credential stuffing attacks globally, with 3.4 billion hitting  financial services organizations specifically — an increase of more than 45% year-over-year in  the sector.  

    Akamai observed nearly 6.3 billion web application attacks in 2020, with more than 736 million  targeting financial services — which represents an increase of 62% from 2019.  

    SQL Injection (SQLi) attacks remained in the top spot across all business types globally, making  up 68% of all web application attacks in 2020, with Local File Inclusion (LFI) attacks coming in  second at 22%. However, in the financial services industry, LFI attacks were the number one  web application attack type in 2020 at 52%, with SQLi at 33% and Cross-Site Scripting at 9%.  

    Over the past three years (2018-2020), Akamai saw DDoS attacks against the financial services  sector grow by 93%, indicating that systemic disruption remains an objective for criminals, who  target services and applications required for daily business. 

    Threat Intelligence Collaboration 

    For this report, Akamai partnered with threat intelligence company WMC Global. The  researchers at WMC Global are experts at understanding SMS phishing (smishing) and the 

    toolkits that criminals devise to make their attacks possible. This unique collaboration examined  two specific phishing kits: ‘Kr3pto’ and ‘Ex-Robotos’. 

    “The ongoing, significant growth in credential stuffing attacks has a direct relationship to the  state of phishing in the financial services industry,” said Steve Ragan, Akamai security  researcher and author of the State of the Internet / Security report. “Criminals use a variety of  methods to augment their credential collections, and phishing is one of the key tools in their  arsenal. By targeting banking customers and employees in the sector, criminals increase their  pool of potential victims exponentially.” 

    The Kr3pto phishing kit, which targets financial institutions and their customers via SMS, has  been observed spoofing 11 brands in the UK, across more than 8,000 domains since May 2020.  WMC Global tracked more than 4,000 campaigns linked to Kr3pto targeting victims via SMS  messaging over 31 days in Q1 2021.  

    Ex-Robotos is a phishing kit that essentially sets a benchmark when it comes to corporate  credential phishing. According to data from the Akamai Intelligent Edge Platform, there were  more than 220,000 hits to the API IP address used for Ex-Robotos over a span for 43 days. In  fact, traffic to that address reached a peak of tens of thousands of hits per day on average  between January 31 and February 5, 2021. 

    “Kits like Kr3pto and Ex-Robotos are just two of the many kits targeting corporations and  consumers today,” said Jake Sloane, Senior Threat Hunter at WMC Global. “It’s important to  remember that employees are consumers too, and with the prevalence of work from home, as  well as mobile device usage in corporate environments, criminals are not shy about attacking  people no matter where they are, which explains the recent growth in SMS-based phishing  attacks.”  

    “By partnering with WMC Global for this report, we were able to expand on our existing  coverage of the financial sector and offer a wider range of details into the attacks that financial  organizations face on a daily basis,” added Ragan. 

    Read the Akamai 2021 State of the Internet/Security report: Phishing for Finance, on our State  of the Internet page. 

    For additional information, the security community can access, engage with, and learn from  Akamai’s threat researchers and the insight that the Akamai Intelligent Edge Platform affords  into the evolving threat landscape by visiting Akamai’s Threat Research Hub. 

    About Akamai 

    Akamai secures and delivers digital experiences for the world’s largest companies. Akamai’s  intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers  and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help  them realize competitive advantage through agile solutions that extend the power of their multi cloud architectures. Akamai keeps decisions, apps and experiences closer to users than 

    anyone — and attacks and threats far away. Akamai’s portfolio of edge security, web and  mobile performance, enterprise access and video delivery solutions is supported by unmatched  customer service, analytics and 24/7/365 monitoring. To learn why the world’s top brands trust  Akamai, visit www.akamai.com, blogs.akamai.com, or @Akamai on Twitter. You can find our  global contact information at www.akamai.com/locations.

  • Vulcan Cyber Announces New Chief Revenue Officer and Internal Promotions to Accelerate Rapid Growth

    Risk remediation leader appoints Jeff Ginter as CRO, Rhett Glauser as CMO, and Nevo Laron as CCO

    TEL AVIV, Israel, May 13, 2021 — Vulcan Cyber, developers of the industry’s only risk and vulnerability remediation SaaS platform, today announced three new executive appointments. Jeff Ginter has been named Chief Revenue Officer (CRO), Rhett Glauser as Chief Marketing Officer (CMO), and Nevo Laron as Chief Customer Officer (CCO). These appointments follow an exceptionally successful Q1 2021 in which the team exceeded revenue targets and signed its biggest customer subscription to date. Vulcan Cyber also closed a Series B fundraising round in Q1, following on the heels of 2020 in which the company achieved 500 percent growth in annual recurring revenue.

    Ginter, Glauser, and Laron are experienced technology leaders who bring extensive leadership in cybersecurity software sales, go-to-market, marketing, and customer success to scale Vulcan Cyber growth and ultimately help information security teams reduce risk through vulnerability remediation outcomes.

    “With the added expertise of Jeff, Rhett and Nevo to our team, Vulcan Cyber is poised for even greater success in the coming years,” said Yaniv Bar-Dayan, CEO of Vulcan Cyber. “These professionals bring a combination of experience, intimate market knowledge and proven capability to propel Vulcan Cyber into its next stage of accelerated growth. Exceptional  go-to-market execution is critical as we bring our unique vision for cyber risk and remediation to enterprise IT security teams. We are poised to affect positive change in enterprise security by helping teams GET FIX DONE in the face of escalating threats and vulnerabilities and increasing infrastructure and application complexity.”

    As Vulcan Cyber CRO, Ginter is building a high-performance, highly motivated team to deliver the value and resources its customers, prospects and partners require. His more than two decades of success in enterprise infrastructure, cybersecurity, and cloud-native software will help the company drive strong and consistent revenue growth. Ginter came to Vulcan Cyber from Aqua Security, where he also served as CRO. Prior to Aqua Security, Ginter held leadership roles with CA Technologies and Paradigm Technology Partners.

    “I’m extremely impressed with the Vulcan Cyber vision to address customer challenges in risk remediation and vulnerability management. The Vulcan Cyber SaaS platform is already changing the way the industry thinks about vulnerability management and remediation,  as well as its impact on the broader cybersecurity industry, are unparalleled,” said Jeff Ginter, CRO, Vulcan Cyber. “The energy, passion, and intelligence of its team carries through from its solutions to users. As a result, the team is creating meaningful change for organizations that must protect themselves from the threat of vulnerabilities.

    Vulcan Cyber also promoted Rhett Glauser and Nevo Laron to new leadership positions with the company.

    Glauser was first hired as Vulcan Cyber VP of Marketing in May 2020. He previously led corporate marketing and demand generation functions in enterprise infrastructure and cybersecurity software companies for twenty years. Specializing in early-stage company marketing, Glauser was instrumental in driving the growth of SaltStack (acquired by VMware), ServiceNow, and Altiris (acquired by Symantec).

    Laron first joined Vulcan Cyber as VP of Customer Success in April 2020. As CCO, he is responsible for managing customer advocacy, satisfaction and adoption to ensure Vulcan Cyber customer needs are the first priority. Laron brings 16 years of software industry customer success experience to the team, having been the first customer success hire at Exabeam where he built an international customer success program from scratch. As Vulcan Cyber brings new enterprise solutions to market, Laron ensures the company is able to build and maintain productive, two-way relationships with its customers to help them reduce cyber risk and drive remediation outcomes.

    Vulcan Cyber recently announced its $21 million series B funding round led by Dawn Capital and joined by Wipro Ventures and existing investors YL Ventures and Ten Eleven Ventures. Following its 20x growth in users in 2020, Vulcan Cyber is scaling quickly to help thwart the dramatic and growing threat of security vulnerabilities and exploits before breach happens.

    For more information about Vulcan Cyber, please visit https://vulcan.io/ to request a demo or try Remedy Cloud today. In addition, Vulcan Free is now available as the industry’s only free vulnerability prioritization tool. Apply for Vulcan Free access today.

    About Vulcan Cyber
    Vulcan Cyber has developed the industry’s first risk remediation platform, built to help cybersecurity and IT operations teams to collaborate and “GET FIX DONE.” The Vulcan platform orchestrates the remediation lifecycle from scan to fix by prioritizing vulnerabilities, curating and delivering the best remedies and automating processes and fixes through the last mile of remediation. Vulcan transforms vulnerability management from find to fix by making it possible to remediate vulnerabilities at scale. The unique capability of the Vulcan Cyber platform has garnered Vulcan Cyber recognition as a 2019 Gartner Cool Vendor and as a 2020 RSA Conference Innovation Sandbox finalist. https://vulcan.io.

  • Jumio’s Automation Surpasses One Million Verifications Per Day as Company Celebrates 118% Increase in Revenue

    AI-powered technology achieving record high catch rates and low false positives for fraud despite enormous influx of traffic

    Palo Alto, CA, May 13, 2021 — Jumio, the leading provider of AI-powered end-to-end identity verification and eKYC solutions, today announced it is now processing more than one million daily identity verifications, the vast majority of which are completely automated. By consistently setting new records, Jumio has already cleared over 100 million different transactions so far in 2021 alone, with YTD revenue growing more than 118% year-over-year.

    Jumio’s sophisticated machine learning models now catch the majority of fraud attempts found. Fraud detection has dramatically increased due to the state-of-the-art accuracy of Jumio’s Face Lookup feature. This innovation flags potential fraudulent activity by the same face being used across multiple identity verification attempts, specifically targeting fraud rings and repeat fraudsters.

    Additionally, Jumio’s automation recently won gold for AI in Security in the 2021 Cyber Security Global Excellence Awards.

    “Scaling to meet this explosive growth has required both innovation and execution. We have even had customers transferring volumes from other identity verification providers that are unable to scale and keep up with their high volumes,” said Bala Kumar, Jumio chief product officer, who joined Jumio in March from TransUnion and iovation. “Powered by automation and an infrastructure that is faster and more reliable than ever, we are excited about the benefits that Jumio’s next-generation innovations will unlock.”

    Building on top of existing AI powered automation, the company continues to accelerate its investments in innovation by leveraging the $150 million round of funding recently raised from Great Hill Partners.

    To learn more about Jumio and its award-winning, AI-powered identity solutions, visit jumio.com.

    About Jumio

    When identity matters, trust Jumio. Jumio’s mission is to make the internet a safer place by protecting the ecosystems of businesses through a unified, end-to-end identity verification and eKYC platform. The Jumio KYX Platform offers a range of identity proofing and AML services to accurately establish, maintain and reassert trust from account opening to ongoing transaction monitoring.

    Leveraging advanced technology including AI, biometrics, machine learning, liveness detection and automation, Jumio helps organizations fight fraud and financial crime, onboard good customers faster and meet regulatory compliance including KYC, AML and GDPR. Jumio has carried out more than 400 million verifications spanning over 200 countries and territories from real-time web and mobile transactions.

    Based in Palo Alto, Jumio operates globally with offices in North America, Latin America, Europe and Asia Pacific and has been the recipient of numerous awards for innovation. Jumio is backed by Centana Growth Partners, Great Hill Partners and Millennium Technology Value Partners.

  • Code42 Incydr Bolsters Insider Risk Indicators with Actionable Prioritization of Data Exfiltration Events

    Contextual alerting details high-risk data movement on endpoints, in cloud environments and email systems

    Minneapolis, MN, May 13, 2021 — Code42, the Insider Risk Management leader, today announced that it has enhanced its Incydr™ data risk detection and response product with a prioritized view of the highest-risk data exposure and exfiltration events happening across organizations.

    The new prioritization model uses Incydr’s extensive library of Insider Risk Indicators (IRIs) to transparently score data exfiltration with evidence and file, vector and user context. It not only surfaces the data exposure events that require the most urgent attention from security teams, but also improves security teams’ ability to quickly reduce, contain and resolve them. With this new prioritization model, Incydr now directly fills a gap left by existing data security technologies as nearly two-thirds (63%) of today’s IT security leaders report not knowing which Insider Risks to prioritize.

    “Security analysts today face a never-ending barrage of alerts,” said Joe Payne, Code42’s president and CEO. “Code42 is addressing this problem head on, showing security teams exactly who and what the biggest risks to their data are, so they can mitigate leaks of proprietary data like source code, product plans and customer information.”

    Stop Data Exfiltration: Actionable Prioritization with Incydr

    Incydr is purpose-built to help security teams effectively manage the dynamic nature of Insider Risk – that includes prioritizing the risks that matter the most. The trio of attributes that make up Code42’s prioritization model set it apart from others in the industry. Code42’s model is:

    • Context-driven: It is designed to manage ever-changing Insider Risk Indicators. Incydr scores combinations of IRIs, or risky file behaviors and activities – such as file mismatch, off-hours activity, untrusted web uploads, or personal cloud sync app use – for each data exposure or exfiltration event happening across employees’ computers or in corporate cloud and email systems. These IRIs give security teams the critical context they need to determine the level of risk of file exposure events.
    • Pragmatic: It is rooted in real-world Insider Risk expertise. Incydr assigns risk scores for file events, which are created using qualitative security research on the most applicable use cases coupled with telemetry data from Incydr.
    • Adaptable: It effectively pinpoints and scores an organization’s highest risk users and saves investigation time. Security teams can tune prioritization settings for their organization’s unique risk tolerance.

    Incydr’s new prioritization model is currently in a Limited Early Access program with a selection of Code42 customers. It is expected to be available to all Incydr customers during the summer of 2021. To learn more technical details about Incydr’s prioritization capabilities, read the Code42 blog.

    The Code42® Incydr™ data risk detection and response product allows security teams to effectively mitigate data exposure and exfiltration risks without disrupting legitimate collaboration. It is a SaaS solution purpose-built for Insider Risk Management. Incydr surfaces the top indicators of Insider Risk and accelerates an organization’s ability to detect and respond to data exposure and exfiltration events. Incydr is cloud-native and built to directly address the gaps in conventional data security solutions. Organizations looking for detailed security intelligence about on- and off-network file movements can use Incydr to help identify and act on the greatest indicators of risk to their data.

    Additional Resources

    About Code42

    Code42 is the Insider Risk Management leader. Native to the cloud, the Code42® Incydr™ solution rapidly detects data loss, leak, theft and sabotage as well as speeds incident response – all without lengthy deployments, complex policy management or blocking employee productivity. With Code42, security professionals can protect corporate data and reduce insider threats while fostering an open and collaborative culture for employees. Backed by security best practices and control requirements, Code42’s insider risk solution can be configured for GDPR, HIPAA, PCI and other regulatory frameworks.

    More than 50,000 organizations worldwide, including the most recognized brands in business and education, rely on Code42 to safeguard their ideas. Founded in 2001, the company is headquartered in Minneapolis, Minnesota, and backed by Accel Partners, JMI Equity and Split Rock Partners. Code42 was recognized by Inc. magazine as one of America’s best workplaces in 2020. For more information, visit code42.com.

  • SkyKick Announces Major Upgrades to Cloud Manager, Strengthening Automation Tools for IT Help Desk, Security and Cloud Administration

    New features help MSPs deliver better customer experience by improving help desk performance, enhancing cloud security offerings and accelerating Microsoft Teams adoption

    Seattle, WA, May 13, 2021 – SkyKick, a global provider of cloud automation and management software for information technology services providers (ITSPs), today announced major upgrades to its Cloud Manager product that will further help ITSPs navigate the increasingly complex world of SMB cloud management.  This Cloud Manager release brings significant automation capabilities to Cloud Command, Security, and Teams product areas to help ITSP’s better manage and secure cloud customers.

    As SMBs continue to rapidly adopt and use SaaS applications, ITSPs worldwide will spend an estimated 500 million labor hours on IT administration annually.  A SkyKick study of over 500 ITSPs found that for MSPs with 3 to 5 employees, routine help desk tasks can consume more than 2000 hours each year.  With 46% of tickets also being escalated to senior engineers, ITSPs are increasingly placing high priority on improving help desk performance and are adopting automation to manage cloud administration tasks and workflows more efficiently.

    “When the cloud emerged just over a decade ago, the IT Service Provider landscape changed forever,” said SkyKick Co-CEO Todd Schwartz. “Now, with the proliferation of SaaS and cloud, we’re entering the age of cloud management for ITSPs, and this intensifies the need for automation to help support customers, secure cloud infrastructure, and improve operational efficiency.”

    As SMBs continue their rapid adoption of cloud and remote work solutions, cloud-based communication solutions are increasingly in demand.  Microsoft Teams has seen over 400% growth in users, with IT partners able to access significant margins for seats under management, yet many ITSPs shy away from managing teams and other applications because of concerns about technical and business readiness.

    Cloud Manager automation will help ITSPs more effectively manage this opportunity through more repeatable deployments, and by empowering Help Desk staff with tools to assess activity and drive Teams adoption.

    Finally, ITSPs face thorny cloud security scenarios for themselves and their customers, particularly with managing securely and effectively across multiple cloud services.

    91% of SMBs customers report that they would use an ITSP if it offered the right security solutions, yet while ITSPs understand that the opportunity to address growing security needs is massive, they are also finding that implementing effective and scalable programs is no simple exercise.

    IT Partners need solutions that help them to strengthen Microsoft 365 security and that use automation to achieve standardization, facilitate regular security assessments and enable the ability to monitor and remediate security gaps.

    “We built Cloud Manager to help ITSPs address the operational complexities of supporting their customers across SaaS products and cloud platforms, while also maintaining margins and delivering optimized operations,” said SkyKick Co-CEO Evan Richman.  “These upgrades deliver enhanced help desk automation, unlock new cloud security scenarios and provide out of the box capabilities to deploy, secure and support Teams, so that ITSPs can both serve customers better and grow revenues.”

    This release focuses on 4 major upgrades for help desk automation, cloud security and management of cross-cloud applications:

    Collections – Managing more and more customers in the cloud means that ITSPs must execute thousands of tasks to effectively administer and manage cloud customers.  Out of the box collections allow ITSPs to easily discover, share, and use automation that is organized in ways that map to how their business works.  ITSPs can also customize pre-populated collections or create their own to map to their unique workflows.

    Monitoring and Scheduling – Partners can schedule any task for the future and monitor important customer information like MFA status, mailbox statistics, Microsoft 365 user reports, and more.  These upgrades enable powerful security scenarios for SMB customers.

    Advanced Permissions and Sharing – Role-based access to the product so that the entire help desk can securely use automation in a way that is tailored to their daily work and responsibilities.  These enhancements allow partners to better manage non-secure password sharing and other activities that reduce security compliance.

    Accelerating Microsoft Teams Adoption – New features will help ITSPs capitalize on the explosive growth of remote work and Microsoft Teams with automation that enables repeatable customer deployments.  Partners will be able to configure Microsoft 365 tenant and teams, create teams from existing groups, protect teams with data-loss-prevention and easily implement enhanced Teams security.

    SkyKick hosted a special virtual launch event on May 11th to unveil the new application to the press, ITSPs and the industry at large.  Visit this page to get access to the on-demand event or visit the SkyKick website for more details.

    About SkyKick
    SkyKick is a global provider of cloud management software for IT Services Providers. The company is headquartered in Seattle, Wash., and has offices in Amsterdam, Sydney, and Tokyo. Its products are designed to help build successful cloud businesses by making it easy and efficient for IT providers to migrate, backup and manage their customers in the cloud. Over 25,000 partners worldwide use SkyKick’s products to accelerate their cloud business, and the company has won numerous awards including being named a Microsoft Partner of the Year, Red Herring Top 100 North America winner and one of the “100 Best Companies to Work For” in Washington State. For more information visit skykick.com.

  • Agiloft Joins Tableau as a Technology Partner to Advance Integrations and Data Analysis Capabilities

    New partnership will enable integration between Agiloft CLM platform and Tableau for more powerful contract analytics. 

    Redwood City, CA, May 13, 2021 — Agiloft, the global standard in no-code contract lifecycle management, today announced it joined Tableau, the world’s leading analytics platform (NYSE: CRM), as a technology Partner. The partnership allows for enhanced integration between Agiloft and Tableau for improved data visualizations and analysis of contract management data.

    As both a Salesforce and Tableau partner, Agiloft fully offers an end-to-end, sell-side and buy-side contract management solution that enables bi-directional integration with Tableau for powerful reporting and analytics.

    With its unmatched configurability and robust AI capabilities, Agiloft’s no-code platform was built to manage and integrate the commercial processes that surround contracts. CLM helps organizations drive long-term revenue growth, maintain cost discipline, and reduce security and compliance risk through monitoring contract obligations and performance across departments, and by integrating enterprise-wide commercial data. 

    Agiloft’s native reporting capabilities are robust, and its out-of-the-box Tableau integration offers even more advanced data analytics capabilities, making it easier for organizations to build reports and dashboards, and generate actionable insights from their contract data. Through the new partnership, Agiloft aims to develop a more robust connector to allow customers to easily connect Agiloft and Tableau. 

     “Tableau is a powerful platform that makes business analytics fast and intuitive, and we are very excited to be adding them as a technology partner,” said Elisabeth Bykoff, VP of Agiloft Global Alliances. “This partnership reflects our commitment to continually add new tools and advanced integrations for increased enterprise productivity and customer success. It also allows us to integrate more tightly with the Salesforce ecosystem.”

    “Agiloft is recognized as a leader in the contract lifecycle management software market for its innovative, easy-to-use and highly customizable solutions,” said Brian Matsubara, RVP of Global Technology Alliances at Tableau. “Combining Tableau’s powerful self-service analytics platform with Agiloft’s no-code CLM platform will help enterprises to analyze contracts quicker and make smarter decisions, faster.” 

    For more information on the Tableau partnership, visit tableau.com/partners. 

    For more information on Agiloft’s Contract Lifecycle Management software, see here.

    About Agiloft

    As the global leader in agile contract lifecycle management (CLM) software, Agiloft is trusted to provide significant savings in purchasing, enable more efficient legal operations, and accelerate sales cycles, all while drastically lowering compliance risk.  Agiloft’s adaptable no-code platform ensures rapid deployment and a fully extensible system. Using contracts as the core system of commercial record, Agiloft’s CLM software leverages AI to improve contract management for legal departments, procurement, and sales operations. Visit www.agiloft.com for more.  

  • Vdoo Announces New Integrations to Simplify Product Security Throughout the Software Development Lifecycle

    Integration with industry-leading platforms makes it easier to secure CI/CD processes and empowers teams to shift security to the left

    TEL AVIV, Israel, May 13, 2021 — Vdoo, a leader in product security for applications, containers, and embedded software, today revealed a series of new integrations designed to make it easier and more efficient for software developers to implement security at every stage of the CI/CD pipeline.  Vdoo’s new integrations support many of the most widely used development tools in the industry, including Jenkins, GitHub, GitLab, JFrog Pipelines and Azure Pipelines, helping developers seamlessly remediate vulnerabilities, achieve shorter release cycles and reduce security risk.

    Finding and fixing vulnerabilities early in the development process, known as shifting left, empowers teams to manage issues while they are easier and less costly to accomplish.

    However, according to GitLab’s 5th Annual DevSecOps survey, nearly 42% of the respondents said it’s a struggle to unpack, process and fix vulnerabilities, and 37% said tracking the status of bug fixes is challenging.

    Vdoo’s new integrations allow developers to automatically trigger security analysis and mitigation actions in the CI/CD process, providing actionable results in every interim and nightly build. Vdoo can identify known (CVEs) and unknown (zero days) issues in any artifact, including embedded systems, containers, server applications, mobile apps, and non-contextual single binaries. When vulnerabilities are identified, new tickets consisting of detailed, actionable mitigation guidance can be created with Vdoo’s existing Jira integration, helping teams prioritize and track their progress in remediating open issues.

    “Organizations need platforms that will help them efficiently secure their software products throughout each step of the development cycle, no matter which tool they use,” said Netanel (Nati) Davidi, Co-Founder and CEO of Vdoo. ”With the release of these latest integrations, Vdoo brings powerful vulnerability detection, prioritization, and mitigation capabilities to the most used CI/CD tools and resources, saving organizations time and money, while delivering the most effective automated product security.”

    Developers, DevOps, and DevSecOps can now streamline security processes with manual or automatic retrieval and analysis of artifacts from different binary repositories such as JFrog Artifactory and DockerHub. This allows teams to define the right automated processes for analyzing and identifying vulnerabilities in their binaries from the earliest stages when added to the repositories, or when adding third-party binaries into the organization’s development environment.

    This new set of integrations joins Vdoo’s REST API and command-line tools to be used in any current pipeline. Vdoo’s REST API is available for all features, enabling users to integrate Vdoo into their automated processes throughout their CI/CD pipeline, repositories, and queries.

    Vdoo’s automated product security platform is the only solution covering the entire product lifecycle – from design, development and testing to deployment and maintenance. Vdoo’s platform performs a complete security analysis in minutes, providing a comprehensive report identifying zero-day vulnerabilities, CVEs, configuration and hardening issues, standard non-compliance, and other security exposures with smart prioritization and mitigation mechanisms.

    About VDOO

    Vdoo is a global leader in the complex and increasingly critical product security space. With Vdoo, organizations can identify, prioritize, and mitigate a vast range of security issues.  As the only automated platform that provides end-to-end product security, Vdoo helps development and security teams reduce time and effort while ensuring optimal product security. The platform addresses a diverse variety of security risks, including supply chain threats, configuration risks, standard compliance, and zero-day vulnerabilities in any kind of software artifact, including embedded systems, containers, server applications, mobile apps and more.

    Founded in 2017 by a team of seasoned cybersecurity entrepreneurs and product security experts, Vdoo is now a global company with offices in Israel, the U.S., Germany, Singapore, and Japan, and dozens of Fortune 500 customers representing the most security-diligent companies from various industries.

    For more information, visit www.vdoo.com

  • ChaosSearch Unveils Industry’s First Multi-Model, Multi-Cloud Data Lake Platform for Delivering Cost-Effective Analytics and Business Intelligence at Scale

    Expands Beyond Award-Winning Log Analytics to Support SQL on Amazon Web Services and Google Cloud Platform

    Boston, MA, May 13, 2021—ChaosSearch has expanded its award-winning log analytics Data Lake Platform to deliver the industry’s first multi-model, multi-cloud data lake for cost effective analytics and business intelligence at scale. By adding support for SQL and leveraging the platform’s unique approach for indexing data and publishing open APIs, ChaosSearch makes it easy and extremely cost-effective to quickly derive value from exploding data volumes residing in businesses’ own cloud environments.

    Today, businesses that seek to be data-driven are challenged by the deluge of machine-generated and business data. The sheer volume of security, availability, log analytics, and other machine-generated data overwhelms current solutions. For business analytics, each new use case requires weeks or even months to set up; data is kept in silos limiting its usefulness to data consumers; data is stored with limited retention; and the need to migrate and manipulate data creates significant cost and compliance risks.

    ChaosSearch enables customers to Know BetterTM, delivering data insights at scale while fulfilling the true promise of data lake economics. The ChaosSearch Data Lake Platform connects to and indexes data within a customer’s own cloud storage environment, rendering it fully searchable and enabling data analytics with existing data tools in use today, leveraging open APIs. The unique multi-model approach gives data-driven teams access to both log and BI data from the same platform, allowing organizations to democratize data insights with governance.

    While other solutions require complex data pipelines consisting of parsing or schema changes, ChaosSearch indexes all data as-is, without transformation, while auto-detecting native schemas.  Businesses can analyze their data with their existing analytic tools within minutes, compared to weeks/months for other solutions.  With its revolutionary approach, ChaosSearch overcomes the cost and complexity of competitive solutions, and delivers unlimited scalability, industry-leading resiliency, and massive time and cost savings. ChaosSearch delivers:

    • Unparalleled time to insight (minutes or hours, not days or weeks) with no data transformation or movement
    • Cost-effective performance at scale with one multi-model data lake on AWS or GCP and no infrastructure management
    • Business agility and full IT governance with auto discovery and schema detections; no data movement or scaffolding; store once and access anywhere
    • Easy access to data through users’ tools of choice, such as Tableau, Looker, Kibana, Grafana or Elastic API

    “Before we partnered with ChaosSearch in late 2020, our SRE teams used to struggle with managing the vast amount of logs it takes to support millions of users in real time in a consistent manner across all our product lines,” said Joel Snook, director of DevOps Engineering at Blackboard. “With ChaosSearch, we are able to use a singular solution for our various logs without the hassle of managing the logging tools as well.”

    “Enterprises today are dealing with skyrocketing data volumes that they must understand and take action on in real time if they want to remain competitive. Without ChaosSearch, they needed multiple solutions for BI and log analytics, all of which come with significant costs, complexities and time drains,” said Ed Walsh, CEO, ChaosSearch. “ChaosSearch helps organizations deliver on the true promise of data lakes. Simply put your data into your cloud, and ChaosSearch activates your data lake. Finally, all your data is available for analysis, without data movement or changing the tools your data analyst, security teams and IT Ops staff use day-to-day.  IT leaders are blown away by our cost-effective performance and immediate impacts of our multi-model platform.

    Based on these capabilities, ChaosSearch is an ideal replacement for the commonly deployed Elasticsearch solutions today and business intelligence use cases. With ChaosSearch, businesses can perform scalable log analytics on AWS S3 and GCP, using the familiar Elasticsearch API for queries, and Kibana for log analytics and visualizations, while reducing costs, providing unlimited retention and reducing complexity. With ChaosSearch SQL API, clients can perform ad hoc queries on S3 and GCP data as well as deploy scalable business intelligence with tools like Looker, Tableau and Metabase.

    Learn more about the multi-model, multi-cloud ChaosSearch Data Lake Platform, see a demo and try it for free here.

    About ChaosSearch

    ChaosSearch empowers data-driven businesses like HubSpot, Blackboard, Equifax and Klarna to Know Better™, delivering data insights at scale while fulfilling the true promise of data lake economics. The only platform designed to support multi-model data, ChaosSearch makes data simultaneously available through Elastic, SQL and in future machine learning APIs.  The ChaosSearch Data Lake Platform can connect to and index all data within a customer’s own cloud storage environment, activating it as fully searchable and available for analysis with existing data tools, while delivering massive time, cost and complexity savings. The Boston-based company raised $40M Series B in December 2020 and is hiring to support its hyper growth. For more information, visit ChaosSearch.io or follow us on Twitter @ChaosSearch and LinkedIn.