Author: devopsy.kinsta.cloud

  • Aqua Security’s ‘Container Security in The Enterprise’ Survey Finds Perception and Governance Gaps Amongst DevOps and Security Teams

    Findings highlight differences in security focus and ownership based on respondents’ roles, experience with containers, and maturity of deployment

    Tel Aviv, Israel and Copenhagen, Denmark: 18, October 2017: Aqua Security, the market-leading container security platform provider today announced the results of its first annual ‘Container Security in the Enterprise’ survey. With companies such as Facebook, Netflix and Google heralding the use of containers for their agility, portability, and cost benefits — enterprises are following suit. But the introduction of new processes and changes to infrastructure require a significant shift in focus.

    Aqua sought to answer the question, “What does this all mean for security?”

    To learn the current state of container security in the enterprise, Aqua Security surveyed 512 individuals meeting the criteria of using containers in development or production today, or planning to use them in the near future.  In addition to the parameters listed above, Aqua’s report also examines how views on these topics vary by experience, adoption, role and company size.

    “Our goal was to analyze how different roles, company sizes, and levels of adoption affect approaches to security in this rapidly evolving market” said Rani Osnat, Vice President of Marketing of Aqua Security. “The survey results show that while Security teams desire sole governance of the topic, their familiarity with containers is lagging when compared with those with hand-on development and deployment experience. IT professionals across all roles understand that how they manage security will have to change, and DevSecOps will become a reality, whether by embedding security within DevOps, by building cross-functional teams, or other methods.”

     Key insights from Aqua’s ‘Container Security in The Enterprise’ survey include:

    • 50% of respondents have container applications in production
    • 80% see room for improvement for handling security in the container
    • 53% overall rank vulnerabilities in images and code as a top security focus area
    •  For those running multiple container apps in production, managing ‘secrets’ is their main focus.
    •  Companies with multiple container applications in production place container security today in the hands of DevOps – future ownership is seen as shifting to DevSecOps

    The report also contains plenty of in-depth information about container orchestrators and other required eco-system technologies being used by respondents, as well as granular detail and breakdowns of the findings highlighted above.

    “The significant change that containers introduce to application delivery and deployment requires a more collaborative approach by security and DevOps teams. Organizations would do well to embed security early into the process, rather than apply security controls after the fact,” said Doug Cahill, Senior Analyst, Cybersecurity at Enterprise Strategy Group

    Survey Data Sources and methodology

    Aqua collected survey data from 512 respondents both online and at 2017 DockerCon NA held in Austin, Texas.  More detailed information on Aqua’s methodology and process is detailed in the report.

    The full report is available for download at

    aquasec.com/survey

    About Aqua Security

    Aqua Security enables enterprises to secure their container-based applications from development to production, accelerating container adoption and bridging the gap between DevOps and IT security. Aqua’s Container Security Platform provides full visibility into container activity, allowing organizations to detect and prevent suspicious activity and attacks in real time. Aqua was founded in 2015 and is backed by Lightspeed Venture Partners, TLV Partners, Microsoft Ventures, and IT security leaders, and is based in Israel and San Francisco, CA.  For more information, visitwww.aquasec.com or follow us on twitter.com/AquaSecTeam.

  • Major Growth, Funding and a Groundbreaking Product Release Highlight Tasktop’s 2017 Fiscal Year

    Value Stream Integration Leader Pulls Off Historic Year

    VANCOUVER, BC, Oct. 17, 2017– Tasktop, the leader in Value Stream Integration, today announced fiscal year (FY) 2017 highlights — covering the reporting period Oct. 1, 2016 to Sept. 30, 2017.

    According to Neelan Choksi, Tasktop president and COO, “We had ambitious goals for 2017.  This year, we set out to and successfully redefined the enterprise agile and DevOps landscape with our groundbreaking Tasktop Integration Hub. The market’s response has been overwhelmingly positive leading to our Series B funding round, significant employee growth and office expansion to meet the customer demand.  Also in 2017, we added a variety of experienced executives and advisors, including industry renowned players.  To top it off, last week our first user conference, Tasktop Connect, sent ripples through the industry as Fortune 50 IT leaders described how Tasktop enabled their digital transformations.”

    Funding

    Tasktop raised $11.3 million in second round funding led byElsewhere Partners, with participation from existing investorsAustin Ventures and Yaletown Partners. Funding has been directed primarily towards the go-to-market development, marketing and sales activities for its recently launched product.

    Strengthened Executive Team

    The company announced four major additions this past fiscal year, including the following:

    • Gene Kim is now serving in a strategic advisor role for Tasktop, providing guidance on the evolution of the company’s products and the future of DevOps and how enterprises in the real world are implementing DevOps at scale.
    • Bill Bock joined its board of directors. A well-known industry leader, he currently serves on the board of directors at Silicon Labs and a number of other private technology companies.
    • Bruce McDonald joined the company as vice president of customer success. In this role, he leads the post-sales customer success team and has responsibility for support; services; knowledge management and training; as well as customer success.
    • David Wong, a seasoned innovator with more than 25 years of experience in the high-tech industry, joined the company as vice president of engineering.

    Growth

    Tasktop increased its global staffing by more than 40 percent, with significant growth in both its Vancouver headquarters and Austin (U.S. headquarters) offices. As a result, it expanded office space in Vancouver by about 40 percent and in Austin by more than 90 percent. Nearly 500 organizations in industries such as healthcare, financial services, travel, government/public sector, transportation, telecommunications, oil and gas, education, retail and automotive, among others, became new customers this past year. In fact, its customer rolls now include 43 of the Fortune 100.

    Industry Event

    Tasktop produced its first industry event, Tasktop Connect, a one-day conference in Columbus, Ohio, to rave reviews, earlier this month. Featured presenters included Gene Kim of IT Revolution; Robin Yeman from Lockheed Martin; Keith Pemberton of McKesson; Carmen DeArdo and Jim Korcykoski from Nationwide; and Mark Ford of TIAA, among others.

    Product

    In January, Tasktop launched Tasktop Integration Hub, which completely reimagines how organizations connect software delivery at scale. The new unified suite introduced model-based integration, a new visual and web-based user interface, and the ability to connect all tools and stakeholders in the delivery pipeline. Already supporting the world’s largest Agile and DevOps transformations, Tasktop now enables enterprises to scale deployments to hundreds of projects, tens of thousands of users and millions of artifacts.

    Shortly thereafter, Tasktop released enhancements to theTasktop Integration Hub, which now offers a landscape view — another leap towards making value stream integration, automation and visibility easy to implement at organizations of any size. By visualizing the tools and integrations in the value stream, organizations can get full visibility and move away from one-off integrations and the “spaghetti” diagrams that are commonplace today.

    Partnerships

    In FY 2017, Tasktop continued to expand its technology partnerships and product network with new integrations for Microsoft SharePoint; Salesforce ServiceCloud, SalesCloud and Marketing; SmartBear QAComplete; Micro Focus ALM Octane; Pivotal Tracker; QA Symphony; ServiceNow Express; Modern Requirements4TFS; GitLab Issues; and WhiteHat.

     

    New OEMs include Micro Focus and Targetprocess. Tasktop also added to its global referral, reseller and/or services partnerships with Damascus Edge, Proquire/Accenture, Quence SRL, Radax Services, Thebes Group and TSOFT.

    About Tasktop

    Over one million users employ Tasktop’s Value Stream Integration technology to transform software development and delivery. Tasktop not only unifies the software development and delivery team, but also provides unprecedented visibility into the business critical processes of software delivery. Tasktop customers are the global leaders in financial services, insurance, government and manufacturing, and include 43 of the Fortune 100, 11 of the top banks in the world, six of the top six health plans and four of the top ten US insurance companies. Partners, including CA, Micro Focus and IBM, rely on our independent, vendor-neutral role to connect their customers’ software delivery disciplines via OEM distributions of our products. For more information about Tasktop, please visit: http://tasktop.com

  • The Aqua Container Security Platform, v 2.6 Delivers Production-Ready Security for Windows Container Applications

    Latest release of Aqua’s leading container security platform also features new capabilities that strengthen compliance and image assurance

     Tel Aviv, Israel and Copenhagen, Denmark – 17 October 2017 – Aqua Security, the market-leading container security platform provider, today announced version 2.6 of its solution, featuring general availability of runtime security for Windows Containers and a slew of additional features detailed below. The Aqua team is at DockerCon EU in Copenhagen this week, where it will be showing its latest software at booth #G10.

     The Aqua Container Security Platform (CSP) delivers comprehensive, single-pane-of-glass security for containerized applications regardless of orchestration, cloud or virtualization environments. In addition to Linux-based containers, Aqua now features production-ready security for Windows Containers-based applications, which are already being used in production by Aqua customers.

     Aqua’s Windows Containers solution enables organizations to secure their image development pipeline, ensure that only trusted images can be deployed, and enforce runtime controls that include detection and blocking of suspicious activities, nano-segmentation of container app networking, and secure delivery of secrets to containers with no downtime.

     “Windows Server containers are becoming a key enabler for customers building new cloud applications as well as breathing new life into their existing applications.  With Aqua’s support for Windows Server containers these customers gain a great and simple option for security, monitoring and auditing,”  said Nir Ben Zvi, Principal Program Manager, Windows Server Security.

     Aqua CSP 2.6 additionally includes more than 40 customer-requested features, among them:

    ●      Pipeline-Driven Image Assurance Policies: Using a single, centralized console, Admins can now assign different image assurance policies and controls by pipeline, allowing to differentiate risk profiles and security controls between applications, development stages and production, or compliance and trust levels.

    ●      SCAP support: Aqua 2.6 supports the Security Content Automation Protocol (SCAP) to allow custom security and compliance checks on images. SCAP scripts can be uploaded and treated as pass/fail tests for image approval, which effectively automates compliance checks into the CI/CD process.

    ●      Fine-Grained Auditing for Compliance: Admins can now selectively turn on fine-grained auditing for processes, which allows recording of extended information about the process, like the command arguments and md5 signature.

    ●      Enhanced Machine Learning Controls: Extends Aqua’s machine learning algorithms to allow automatic profiling of Linux and Windows application activity and create runtime security policies. Aqua 2.6 shows a 50% improvement in the time it takes to automatically learn a web application.

    “As enterprise use of containers continues to mature, the real needs of enterprises for native container application security emerge,“  said Amir Jerbi, CTO and co-founder of Aqua Security. “With Aqua 2.6 we continue to commit to our ‘secure once, run anywhere’ objective, adding production-ready support for Windows containers, in addition to our support for Linux containers and all major orchestrator stacks.””

    The Aqua team is at DockerCon EU in Copenhagen this week, and will be featured in several sessions:

    ●      What Have Syscalls Done For You Lately? – Liz Rice, Technology Evangelist at Aqua, Black Belt session – Auditorium 10, Tuesday, 17 Oct. at 11:15AM

    ●      Modern App Security Requires Containers – Panel discussion featuring Liz Rice – Auditorium 10, Tuesday, 17 Oct. at 5:10PM

    ●      The Equifax Breach – Contained by Containers – Benjy Portnoy, Director of DevSecOps at Aqua, Ecosystem session – Auditorium 12, Wednesday, 18 Oct. at 1:50PM

     DockerCon EU attendees are invited to attend the sessions, and learn more about Aqua 2.6 at booth #G10 at the expo hall.

  • Clarive releases free version of its software

    Clarive releases free version

    Madrid, ES: October 11th, 2017

    Clarive, the only company offering a simplified, end-to-end DevOps platform for every company size releases a new version of its on-premise software for small and midsize teams. Clarive Standard Edition is available for free and can be licensed progressively as teams grow and expand.

     

    Clarives current leading ARA solution has been rebranded Clarive Enterprise Edition, Clarive EE for short. The more flexible and scalable Clarive EE is built on top of the new Standard Edition. Upgrades between editions will be a seamless experience for the users.

     

    Adding Clarive Standard to the Clarive family is a significant change on how the company distributes its tool worldwide. Now users can install, ramp up and scale out at a faster pace with Standard Editions straightforward setup workflow.

     

    Clarive Standard is available in 3 affordable editions: Free, Team and Business. The Free version allows up to 25 users or nodes and can be upgraded to Team for only $2 per month per user or node. The Business Edition is designed for users that require 24/7 support and advanced security options. Clarive Business starts at $6 per month per user or node.

     

    Clarive Enterprise will as before, satisfy the demanding needs of evolving organizations, including Enterprise connectors (SAP, Salesforce, Mainframe, Siebel and many more), visual rule designing, monitoring and fine-grained traceability and reporting. Information on Enterprise licensing options can be obtained through Clarives sales team or network of worldwide partners.

    Rodrigo Gonzalez, CEO of Clarive on the release of Clarive Standard Edition: “This is DevOps at its finest. Code, track and deploy in one tool with battle-tested Git workflows, kanban boards and a rule-based deployment language. Clarive leverages the power of containers and any programming language to automate the end-to-end application delivery, greatly simplifying the DevOps toolchain.”

     

    With the new offering, Clarive becomes the only leading ARA vendor that supports a wide-range of budgets while scaling out from simple to complex environments.

  • Introducing Grafeas: An open-source API to audit and govern your software supply chain

    Stephen Elliott, Product Manager, Developer Platforms & Jianing Guo, Product Manager, Container Security

    Building software at scale requires strong governance of the software supply chain, and strong governance requires good data. Today, Google, along with JFrog, Red Hat, IBM, Black Duck, Twistlock, Aqua Security, and CoreOS, is pleased to announce Grafeas, an open source initiative to define a uniform way for auditing and governing the modern software supply chain. Grafeas (“scribe” in Greek) provides organizations with a central source of truth for tracking and enforcing policies across an ever growing set of software development teams and pipelines. Build, auditing, and compliance tools can use the Grafeas API to store, query, and retrieve comprehensive metadata on software components of all kinds.

    As part of Grafeas, Google is also introducing Kritis, a Kubernetes policy engine that helps customers enforce secure software supply chain policies. Kritis (“judge” in Greek) enables organizations to do real-time enforcement of container properties at deploy time for Kubernetes clusters based on attestations of container image properties (e.g., build provenance and test status) stored in Grafeas.

    “Shopify was looking for a comprehensive way to track and govern all the containers we ship to production,” said Jonathan Pulsifer, Senior Security Engineer at Shopify. “We ship over 6,000 builds every weekday and maintain a registry with over 330,000 container images. By integrating Grafeas and Kritis into our Kubernetes pipeline, we are now able to automatically store vulnerability and build information about every container image that we create and strictly enforce a built-by-Shopify policy: our Kubernetes clusters only run images signed by our builder. Grafeas and Kritis actually help us achieve better security while letting developers focus on their code. We look forward to more companies integrating with the Grafeas and Kritis projects.” (Read more in Shopify’s blog post.)

    The challenge of governance at scale

    Securing the modern software supply chain is a daunting task for organizations both large and small, exacerbated by several trends:

     

    • Growing, fragmented toolsets: As an organization grows in size and scope, it tends to use more development languages and tools, making it difficult to maintain visibility and control of its development lifecycle.
    • Open-source software adoption: While open-source software makes developers more productive, it also complicates auditing and governance.
    • Decentralization and continuous delivery: The move to decentralize engineering and ship software continuously (e.g., “push on green”) accelerates development velocity, but makes it difficult to follow best practices and standards.
    • Hybrid cloud deployments: Enterprises increasingly use a mix of on-premises, private, and public cloud clusters to get the best of each world, but find it hard to maintain 360-degree visibility into operations across such diverse environments.
    • Microservice architectures: As organizations break down large systems into container-based microservices, it becomes harder to track all the pieces.

     

    As a result,  organizations generate vast quantities of metadata, all in different formats from different vendors and are stored in many different places. Without uniform metadata schemas or a central source of truth, CIOs struggle to manage and secure their software supply chains, let alone answer foundational questions like: “Is software component X deployed right now?” “Did all components deployed to production pass required compliance tests?” and “Does vulnerability Y affect any production code?”

     

    The Grafeas approach

    Grafeas offers a central, structured knowledge-base of the critical metadata organizations need to secure their software supply chains. It reflects best practices Google has learned building internal security and governance solutions across millions of releases and billions of containers. These include:

    • Using immutable infrastructure (e.g., containers) to establish preventative security postures against persistent advanced threats
    • Building security controls into the software supply chain, based on comprehensive component metadata and security attestations, to protect production deployments
    • Keeping the system flexible and ensuring interoperability of developer tools around common specifications and open-source software

     

    Grafeas is designed from the ground up to help organizations apply these best practices in modern software development environments, using the following features and design points:

     

    • Universal coverage: Grafeas stores structured metadata against the software component’s unique identifier (e.g., container image digest), so you don’t have to co-locate it with the component’s registry, and so it can store metadata about components from many different repositories.
    • Hybrid cloud-friendly: Just as you can use JFrog Artifactory as the central, universal component repository across hybrid cloud deployments, you can use the Grafeas API as a central, universal metadata store.
    • Pluggable: Grafeas makes it easy to add new metadata producers and consumers (for example, if you decide to add or change security scanners, add new build systems, etc.)
    • Structured: Structured metadata schemas for common metadata types (e.g., vulnerability, build, attestation, and package index metadata) let you add new metadata types and providers, and the tools that depend on Grafeas can immediately understand those new sources.
    • Strong access controls: Grafeas allows you to carefully control access for multiple metadata producers and consumers.
    • Rich query-ability: With Grafeas, you can easily query all metadata across all of your components so you don’t have to parse monolithic reports on each component.

     

    Defragmenting and centralizing metadata

    At each stage of the software supply chain (code, build, test, deploy, and operate), different tools generate metadata about various software components. Examples include the identity of the developer, when the code was checked in and built, what vulnerabilities were detected, what tests were passed or failed, and so on.This metadata is then captured by Grafeas. See the image below for a use case of how Grafeas can provide visibility for software development, test, and operations teams as well as CIOs.

     

    To give a comprehensive, unified view of this metadata, we built Grafeas to promote cross-vendor collaboration and compatibility; we’ve released it as open source, and are working with contributors from across the ecosystem to further develop the platform:

     

    • JFrog is implementing Grafeas in the JFrog Xray API and will support hybrid cloud workflows that require metadata in one environment (e.g., on-premises in Xray) to be used elsewhere (e.g., on Google Cloud Platform). Read more on JFrog’s blog.
    • Red Hat is planning on enhancing the security features and automation of Red Hat Enterprise Linux container technologies in OpenShift with Grafeas. Read more on Red Hat’s blog.
    • IBM plans to deliver Grafeas and Kristis as part of the IBM Container Service on IBM Cloud, and to integrate our Vulnerability Advisor and DevOps tools with the Grafeas API. Read more on IBM’s blog.
    • Black Duck is collaborating with Google to implement the Google artifact metadata API implementation of Grafeas, to bring enterprise-grade open-source security to Google Container Registry and Google Container Engine . Read more on Black Duck’s blog.
    • Twistlock will integrate with Grafeas to publish detailed vulnerability and compliance data directly into orchestration tooling, giving customers more insight and confidence about their container operations. Read more on Twistlock’s blog.
    • Aqua Security will integrate with Grafeas to publish vulnerabilities and violations, and to enforce runtime security policies based on component metadata information. Read more on Aqua’s blog.
    • CoreOS is exploring integrations between Grafeas and Tectonic, its enterprise Kubernetes platform, allowing it to extend its image security scanning and application lifecycle governance capabilities.

     

    Already, several contributors are planning Grafeas releases and integrations this quarter:

    • JFrog’s Xray implementation of Grafeas API
    • A Google artifact metadata API implementation of Grafeas, together with Google Container Registry vulnerability scanning
    • Bi-directional metadata sync between JFrog Xray and the Google artifact metadata API
    • Black Duck integration with Grafeas and the Google artifact metadata API

    Building on this momentum, we expect numerous other contributions to the Grafeas project early in 2018.

    Join us!

    The way we build and deploy software is undergoing fundamental changes. If scaled organizations are to reap the benefits of containers, microservices, open source and hybrid cloud, they need a strong governance layer to underpin their software development processes. Here are some ways you can learn more about and contribute to the project:

     

     

    We hope you will join us!

  • State of Digital Operations Report Reveals IT Challenges Resulting from the Rise of Digital Services in the UK

    PagerDuty Survey Finds Strong Digital Operations Management Strategy Critical To Accelerate Digital Transformation

    LONDON–(Oct 5, 2017) – PagerDuty, the global leader in Digital Operations Management, today released the findings of its State of Digital Operations Report: United Kingdom, which revealed the need for a shift in workforce expectations and the way teams across an organisation collaborate to resolve consumer-facing incidents. While the majority of IT practitioners believe their organisation is equipped to support digital services, over half of them also say they face consumer-impacting incidents at least one or more times a week, sometimes costing their organisations millions in lost revenue for every hour that an application is down. The report also highlighted that an organisation’s failure to deliver on consumer expectations for a seamless digital experience can greatly affect a company’s brand reputation and bottom line.

    The report findings are based on a two-part survey of over 300 IT practitioners and over 300 UK consumers on the impact of digital services. The survey specifically examined what UK consumers expect from digital experiences, how organisations are investing in supporting digital services and what tools IT teams are using to keep these services up and running.

    The State of Digital Operations report found that nearly all (90.6 percent) of UK consumers surveyed use a digital application or service to complete tasks such as banking, making dinner reservations, finding transportation, grocery shopping and booking airline tickets, at least one or more times a week. This finding is indicative of the larger UK digital services landscape — IDC predicts that half of the Global 2000 enterprises will see the majority of their business depend on their ability to create and maintain digital services, products and applications by 2020. In addition, IDC says 89 percent of European organisations view digital transformation as central to their corporate strategy.

    “With the rise in digital services in the UK, European businesses need to be ready to accelerate their digital transformation journey and adapt to consumer demands,” said Jennifer Tejada, CEO at PagerDuty. “Disrupting brand and engagement experience means lost revenue and organisations need to be proactive versus reactive — a reactive or automated approach to resolving consumer-facing incidents is not table stakes. Organisations can arm their IT teams by taking a holistic approach to incident response. Solutions that embrace capabilities such as machine learning and advanced response automation can help organisations easily deploy an expedited response to consumer-facing incidents.”

    IT Cannot Meet Consumer Expectations
    The State of Digital Operations report revealed that along with the heavy reliance on digital services, UK consumers expect a seamless user experience, and IT organisations are struggling to meet these expectations.

    When a digital app or service is unresponsive or slow, many consumers indicated that they are quick to stop using that app or service.

    • 86.6 percent of surveyed consumers said they are likely to temporarily switch to an alternative mobile app or website to complete their task.
    • 81.2 percent of consumers said they would wait just one minute or less for a slow or unresponsive application before leaving to use a different app or service.
    • 66.8 percent of respondents said they were likely to never use a slow or unresponsive app or service again.

    Meanwhile, 87.4 percent of IT personnel said their organisations take more than five minutes to resolve IT incidents that impact consumer-facing digital services, putting them at risk of losing users. The report also revealed that while 72.3 percent of IT practitioners believe their organisation is currently equipped to support digital service offerings effectively, 67.1 percent of IT organisations said they face consumer-impacting incidents at least one or more times a week. This places organisations at constant risk of losing customers and revenue due to the length of time it takes to resolve these issues.

    The Effects of Downtime on the Bottom Line
    IT teams are now at the front and center of providing customers with a satisfying user experience. The State of Digital Operations report revealed that organisations are making significant upfront investments in tools and technologies that support the delivery of digital services in order to avoid costly performance issues later on. Nearly half of respondents (49.9 percent) reported that their organisations budget £500,000 or more for DevOps and ITOps tools and services to support and manage digital service offerings — a critical investment as downtime or service degradation can significantly impact an organisation’s financial success.

    • Over one third of respondents (35.5 percent) said that on average, an hour of downtime costs their organisation between £500,000 to £5 million.
    • 14.3 percent indicated an hour of downtime costs £5 million or more.

    IT disruptions aren’t just affecting the developers, DevOps or ITOps teams responsible for managing digital services performance — the State of Digital Operations report shows that the top three non-IT departments most impacted by software issues are:

    • Sales (35.2 percent)
    • Accounting and Finance (32.9 percent) and;
    • Research and Development (25.4 percent)

    The Right Tools, Technologies and Strategy Make Digital Transformation Possible 
    The State of Digital Operations survey shows monitoring tools are important in helping organisations support digital service offerings effectively. The top three DevOps and ITOps tools used by IT teams to provide the insight needed to prevent disruptions in a customer’s digital experience are:

    • Security monitoring (51.1 percent)
    • Infrastructure monitoring (47.9 percent) and;
    • Application monitoring (41.4 percent)

    “In order to fully embrace digital transformation, IT teams need streamlined tools and a tight digital operations strategy,” said Steve Barrett, head of EMEA Sales at PagerDuty. “By adopting and deploying the right tools, organisations can quickly and easily resolve problems before they are customer impacting, helping protect their revenue and reputation while delivering a seamless customer experience.”

    The full 2017 State of Digital Operations UK report is available for download at PagerDuty Resources.

    About PagerDuty
    The PagerDuty® Digital Operations platform is the leading SaaS solution that empowers developers, DevOps, IT operations and business leaders to prevent and resolve business-impacting incidents for exceptional customer experience. More than 10,000 small, mid-size and enterprise global customers such as Comcast, Lululemon, IBM and Panasonic use and trust PagerDuty to maximize their time and increase their business response and efficiency. When revenue and brand reputation depends on customer satisfaction, PagerDuty arms businesses with the insight to proactively manage incidents and events that may impact customers across their IT environment. Headquartered in San Francisco, the company was recently listed in the 2016 Deloitte Technology Fast 500, Inc. 500 and Forbes 2017 Cloud 100 lists. Try PagerDuty for free at www.pagerduty.com. Follow our blog and connect with us on Twitter, LinkedIn, YouTube and Facebook.

  • Enterprise Automation Platform from CA Technologies Delivers Intelligence for Greater Speed and Efficiency

    New Release Offers Unified Suite of Products for Today’s Modern Software Factory

     

    NEW YORK – Oct 10, 2017 – CA Technologies (NASDAQ:CA) today announced a major new release of the CA Automic One Automation platform, a unified suite of automation products enabled to deliver Intelligent Automation for the Modern Software Factory. The latest release addresses a rapidly growing market that has the potential to reach over $6B by 2020 with critical growth areas in Cloud, Big Data and DevOps driving Datacenter automation.

     

    “Enterprises continue to leverage well-defined, highly automated processes to enable software to be developed in shorter cycles and deployed into production at higher-velocity,” said Ayman Sayed, president and chief product officer at CA Technologies. “Intelligent Automation offers the path to enhancing a more agile enterprise. By enabling enterprises to move from traditional process automation to Intelligent Business Automation, CA Automic delivers on the promise of the Modern Software Factory.”

    Automating the Modern Software Factory with V12.1

    Unlike other products on the market that combine different user interfaces, reporting tools, analytics databases and engines, the CA Automic One Automation Platform uniquely runs on a single, unified, common platform delivering a comprehensive business-driven solution.

    o   For IT Operations who need to keep pace with the speed of modern Dev teams and the business:

    o   CA Automic V12.1 provides a unique intelligent automation offering to simplify processes and deliver zero-touch self-service capabilities within the Modern Software Factory.

    o   For Development leaders who must free up their development teams to focus on innovation within the Modern Software Factory:

    o   CA Automic V12.1 provides new shift-left capabilities to remove scripts and manual efforts, and helps to enable the dev teams to automate within and orchestrate across the DevOps tool chain in a remarkable zero-touch self-service manner.

    o   For Business owners who require Dev & IT to shift to agile and modern application delivery:

    o   CA Automic V12.1 helps to enable the business to drive top line growth and customer experience by providing a fully automated agile enterprise with unique intelligent automation and the capabilities to automate within and orchestrate across the DevOps tool chain.

     

    The CA Automic One Automation platform enhances every company’s transformational journey to deliver an agile business, deploy applications faster, enhance security and enable automated remediation of application performance.

     

    Committed to Intelligent Automation for the Modern Software Factory

    According to research by IDC and Forrester, CA Technologies is amongst the top global providers of both Workload Automation and Continuous Delivery and Release Automation. In September 2017 CA Technologies was recognized as a Leader in the Gartner Magic Quadrant for Application Release Automation.4

     

    Today’s announcement of the new platform is part of CA Technologies’ ongoing commitment to enabling intelligent automation for the enterprise. Aligned with bringing the Modern Software Factory to life for accelerated business transformation, CA Technologies brings together the full line of automation products from across the company, including Automic, to empower modern application delivery.

     

    Supporting Quotes

    “The speed of change in the DevOps/Agile space is driving greater needs for seamless control across the whole process from business needs through development and test to operations.  Release automation now has to have additional intelligence around areas such as orchestration, as well as having the capacity to embrace multi- and hybrid-cloud architectures without the user having to overly concern themselves around the actual physical aspects of the platform.  Organizations should be looking for systems that not only meet their requirements now, but where the vendor can already provide pointers as to how the system will support changing requirements in the future.  With such a dynamic pace of change, any need to reverse out from a solution chosen now to a new solution down the line due to a lack of flexibility on the part of the vendor could be disaster for an organization.” – Clive Longbottom, analyst and founder, Quocirca.

    “CA Technologies has aligned its DevOps and application release automation tooling with Automic Release Automation (RA) at its center. CA Automic’s business process approach is designed for the larger enterprises with heavy-duty release requirements and has excellent support for new development paradigms such as containerization.” – Michael Azoff, principal analyst, Ovum.

    CA Automic Workload Automation V12.1, CA Automic Release Automation V12.1 and CA Automic Service Orchestration V12.1 as part of the CA Automic One Automation Platform are immediately available for general shipment. All plugins are immediately available on the Automic Marketplace. Pricing is on demand for non-CA Automic customers.

    Tweet this: New @CAinc @Automic Release Delivers Intelligent Business Automation to enable the Modern Software Factory http://bit.ly/2hNflqd

     

    Additional Resources

    To hear Industry Analysts, Customers and CA Automic discuss key strategies for automating business processes, orchestrating across DevOps toolchains and driving business value, signup for the definitive Business Automation Webinar Series.

     

    Follow Automic Software

     

    IDC 2017 Worldwide Workload Scheduling and Automation Software Forecast, 2017-2021. Feb. 2017 – DOC # US41373317. 
    2
     
    IDC Worldwide Workload Management Software Market Share, 2016: Market Growth Returns. Jun. 2017 – DOC # US42776017. 
    3 Forrester Research, The Forrester Wave™: Continuous Delivery And Release Automation, Q3 2017, Stroud, Gardner, et al., 30 August 2017.
    4
     Gartner, Inc., Magic Quadrant for Application Release Automation, Colin Fletcher and Laurie F. Wurster, 27 September 2017.

    Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

    About CA Technologies
    CA Technologies (NASDAQ:CA) creates software that fuels transformation for companies and enables them to seize the opportunities of the application economy. Software is at the heart of every business in every industry. From planning, to development, to management and security, CA Technologies is working with companies worldwide to change the way we live, transact, and communicate – across mobile, private and public cloud, distributed and mainframe environments. Learn more at www.ca.com.

  • Sauce Labs Launches Extended Debugging Tools for Selenium Tests

    New Feature Offers Insight into Browser and Networking Issues That Are Causing Test Failures

    SAN FRANCISCO, CA–(Marketwired – Oct 10, 2017) – Sauce Labs, Inc., provider of the world’s largest cloud-based platform for automated testing of web and mobile applications, today introduced Extended Debugging for Selenium tests.

    When a test fails, the team responsible for resolution can spend a significant amount of time attempting to determine if the fault is with the application or the test code itself. Extended Debugging from Sauce Labs combines browser console log information with networking data to identify the location of the problem and identify the root cause, dramatically accelerating resolution.

    Today, much of a web app is executed in the browser, so when an app fails, access to the browser console logs is crucial to timely resolution of the issue. Extended Debugging from Sauce Labs generates the browser console logs that provide the browser execution details and network logs (via HAR – HTTP Archive – files) that show the network calls made by the browser. Together developers can use this data to rapidly determine if the issue lies with the application or the test, and then move to quickly resolve it

    A flaky test is one that fails intermittently with no changes to the app or test. These tend to be the most difficult issues for devs to fix, because the issues cannot be determined simply by examining test videos or even the logs. The issues usually are associated with browser network calls that are slow, return errors, or just a time out. Extended Debugging from Sauce Labs generates this network data (via HAR files) that can be viewed after the test to quickly understand what caused the issue and speed resolution.

    “Automated testing is the backbone of continuous delivery. By adding Extended Debugging to our platform, we’re ensuring that our customers can identify the root case of test failures faster,” said Lubos Parobek, vice president of product at Sauce Labs. “This has been a much anticipated addition to our platform as browser and networking failures can often be difficult to reproduce, troubleshoot and fix.”

    Free for all Sauce customers, Extended Debugging is now available in beta. Extended Debugging for Sauce Labs is compatible with Chrome (version 41 and above) and Firefox (version 51 and above).

    To learn more about Extended Debugging and to join the beta program, visit this link.

    Helpful Links:
    SauceCon website
    Sauce Labs website
    Sauce Labs blog
    Selenium website
    Twitter

    About Sauce Labs
    Sauce Labs provides the world’s largest cloud-based platform for the automated testing of web and mobile applications. Its award-winning service eliminates the time and expense of maintaining an in-house testing infrastructure, freeing development teams of any size to innovate and release better software, faster.

    Sauce Labs is a privately held company funded by Toba Capital, Salesforce Ventures, Centerview Capital Technology, IVP and Adams Street Partners. For more information, please visit https://saucelabs.com.

  • Puppet Partners with Google Cloud to Support Migration and Management in the Cloud

    New GCP Modules For Puppet Help New and Existing Puppet Users Take Advantage of Google Cloud Platform

    PORTLAND, OR–(Marketwired – Oct 10, 2017) – Puppet, the standard for automating the delivery and operation of the software that powers everything around us, today announced a new partnership with Google Cloud, including Puppet Approved modules to accelerate cloud adoption and dedicated engineering teams. This collaboration helps Puppet customers quickly adopt Google Cloud Platform (GCP) services, including its advanced machine learning and data analytics capabilities, while reducing IT costs and gaining the agility and flexibility of the cloud.

    As more businesses look to capitalize on the advantages of the cloud, migrating and managing applications as they move to the cloud remains a challenge. Migration often means rearchitecting your environment in the cloud which is time consuming and error prone when done manually. With Puppet, users define their infrastructure as code once and can apply those configurations across their on-premises and cloud environments. Puppet accelerates migration to the cloud and provides Day 2 management which increases operational efficiency in dynamic, hybrid environments. As part of the joint effort, customers are now able to leverage a set of Google-developed modules that automate the provisioning, configuration, and ongoing management of GCP services to help Puppet customers quickly and effectively take advantage of GCP.

    Google Cloud recently released a set of Puppet Approved modules on the Puppet Forge for managing infrastructure-as-a-service components and Kubernetes, including; Google Compute Engine (GCE), Cloud DNS, Cloud SQL, Google Container Engine (GKE), Cloud Storage, and Google Authentication credentials. Puppet Approved is a designation given to modules that pass specific quality and usability requirements. At PuppetConf 2017, Google Cloud will release additional modules to increase coverage for Google Cloud products, with the next set of modules focusing on data processing, including Google Cloud Pub/Sub, Cloud Spanner, and Stackdriver. They will continue working to release new modules over the next several months.

    Google Cloud will also be releasing the technology they used to generate modules so the Puppet module ecosystem can move faster and keep up with rapidly changing APIs in the cloud. Google’s Puppet code generation tool is a boon to module developers because it enables faster development and broader coverage.

    “As enterprises move to the cloud, they are looking for ways to leverage their existing infrastructure investments,” said Eric Johnson, Engineering Manager, at Google. “With our new Puppet modules for Google Cloud, we’re enabling customers to more rapidly migrate to the cloud and manage their on-premises and cloud environments with Puppet.”

    “Our customers want choice, flexibility and the ability to manage everything they have, from their physical infrastructure to cloud resources for maximum operational efficiency and scale,” said Nigel Kersten, Chief Technical Strategist, Puppet. “With Google Cloud’s expertise in providing world class infrastructure and Puppet’s widely adopted enterprise management platform, we’re helping customers accelerate their move to the cloud.”

    Additional resources

    • Learn more about Puppet.
    • Subscribe to the Puppet blog.
    • Follow Puppet on Twitter @puppetize.
    • Try Puppet Enterprise for free.

    About Puppet
    Puppet is driving the movement to a world of unconstrained software change. Its revolutionary platform is the industry standard for automating the delivery and operation of the software that powers everything around us. More than 33,000 companies including more than two thirds of the Fortune 100 — use Puppet’s open source and commercial solutions to adopt DevOps practices, achieve situational awareness and drive software change with confidence. Based in Portland, Oregon, Puppet is a privately held company with more than 400 employees around the world.

  • Jelastic PaaS Announces Native Support for Java EE 8 and Java SE 9

    Jelastic announced live support for the just-released Java EE 8 and Java SE 9 implementations

     

    Jelastic, the advanced PaaS that simplifies complex cloud deployments and provides unique usage-only pricing, today announced live support for the just-released Java EE 8 and Java SE 9 implementations.

    “Jelastic is a Java-native cloud platform committed to helping developers focus on their core competencies by reducing the amount of system administration work. Since our founding, we’ve been open to the needs of the Java community and do everything to be in tune with the latest technology updates by making new implementations instantly available within our platform,” says Ruslan Synytsky, Jelastic CEO and co-founder.

    Jelastic customers can now easily install managed Docker containers with GlassFish 5 and Payara 5 to benefit from Java EE 8 latest improvements. New capabilities include Servlet 4.0 API with HTTP/2 support, enhanced JSON support including a new JSON binding API, a new REST Reactive Client API, asynchronous CDI Events, a new portable Security API, Server-Sent Events support (Client & Server-side) and many others.

    “Jelastic is providing Java EE 8 inside containers! That’s very exciting because it allows developers to experiment with new features of the latest Java EE version in an easy, secure and robust way for testing and scalable production environments. I’m sure developers, from novice to experts, will really enjoy these possibilities,” commented Bruno Souza, Java evangelist and founder of SouJava.

    Using Jelastic PaaS, developers can easily create and manage standalone or clustered GlassFish 5 and Payara 5 containers with built-in tools for easy deployment, automatic scaling, load balancing, traffic distribution and monitoring of the servers.

    JDK 9 is also available within the Jelastic platform for use with Tomcat (and other application servers in the near future). This production-ready implementation of the Java SE 9 Platform Specification has been recently approved in the Java Community Process (JCP) and provides a set of new updates; among them are:

    • all-new modular system that lets run JVM with only those modules and APIs which are required by the application
    • modern memory shrinking G1 garbage collector is enabled by default
    • full support for HTTP 2.0 and a new HTTP client for Java that replaced HttpURLConnection
    • the process API has been improved for controlling and managing operating-system
    • availability of JShell, an interactive Read-Eval-Print-Loop (REPL)

    “Although it has repositioned itself to be more technology-agnostic these days, the roots of Jelastic are in Java. This deep commitment to the Java and Java EE communities is self evident in the fact that Jelastic is the first PaaS to offer support for both Java EE 8 and Java SE 9. In my mind there has never been any doubt that Jelastic should be one of the first destinations for Java developers on the Cloud,” says Reza Rahman, Senior Java Technologist at CapTech Ventures, Inc. and the chief Java EE Guardian.

    GlassFish 5 and Payara 5 on Java EE 8, as well as Tomcat 9 on JDK 9 can be automatically installed within minutes and tried out for free at the platform, follow the link to start installation https://jelastic.com/java-cloud-hosting/

    About Jelastic
    Jelastic is a robust solution for the cloud market – hosting providers, enterprises and developers – combining the benefits of PaaS and CaaS in a single turnkey package. Its rich interface simplifies complex cloud deployments by automating the creation, scaling, clustering and security updates of microservices or monolithic applications. Jelastic has a unique pay-for usage-only pricing model and is available as public, private, hybrid and multi-cloud in more than 55 data centers worldwide. The platform provides support of Java, PHP, Ruby, Node.js, Python, .NET environments and custom Docker containers. More info is at https://jelastic.com