devopsy.kinsta.cloud

Category: Events

  • Open Your Ears and Get Ready to Listen: Cloud-Native Days with Kubernetes

    Open Your Ears and Get Ready to Listen: Cloud-Native Days with Kubernetes

    If you think all the way back to primary and secondary school, you may remember hearing something like, “open your ears while your teacher is talking to you.” It’s true that someone tuned in to listening learns more than someone who doesn’t, but opening your ears is a lot more important than that. Open ears have the ability to open minds. And with the tech industry constantly changing it’s more important than ever to keep your ears—and your mind—open to change.

    With Cloud-Native Days with Kubernetes approaching, attendees have the perfect chance to open their ears and listen to the best of the best in the tech industry. Cloud-Native Days with Kubernetes is a two day virtual summit boasting over 50 speakers and sessions led by industry thought leaders and doers in the cloud-native space. Attendees will walk away with a better understanding of cloud native, its impact on the IT landscape and a lot more after listening to the key practices and methodologies of these tech titans.

    While there are a myriad of talented speakers at Cloud-Native Days with Kubernetes, there are two very special keynote speakers you’ll want to pay extra attention and listen extra closely to. Hosting keynote sessions Aug. 4 and 5, Tara Hernandez and Caroline Wong are prepared to talk about technology shifting and the future of cloud-native security. With loads of experience and sage advice, Tara and Caroline are without a doubt the top two tech experts you won’t want to miss.

    If you’re unfamiliar with Tara Hernandez, she’s a senior engineering manager at Google Cloud Platform, Associate Board member of Women Who Code and the host of the 12 episode podcast series, ‘Women Who Code’. A specialist in software engineering infrastructure and early backer of the Continuous Integration revolution, Tara has done everything from developing developer tools such as Tinderbox and Bugzilla, working at Pixar Animation studios to reinvent development infrastructure to handle the challenges of writing software in a film production environment, and helping create cloud developer platforms at Google. Beyond being a wizard in her field, Tara is equally impressive in her drive to share useful things about engineering management. 

    No-one’s journey goes without its challenges. But for Tara, “One issue [she] has faced in her rise to success is a case of imposter syndrome. While she has always had the skills to overcome any challenges that came her way, it took a lot of work for her to develop mental self defenses, and tame the anxiety that came when she was presented with a project […] Getting involved with [Women Who Code] has made her aware of the need for advocacy at a grassroots level, and she’s become more confident brainstorming with peers and management teams about increasing diversity in her own work place. At the same time it’s helped her find the confidence to attend more conferences, and even start giving talks.” A supporter, advocate, mentor, and “shining example of someone who has overcome doubt to achieve success,” Tara is the ultimate speaker to inspire change and innovation, especially in creators. 

    Check out Tara’s podcast ‘Women Who Code’ and listen to her talk about the current state of DevOps here to learn more before her talk, ‘Those Little Tectonic Shifts,’ Wednesday Aug. 4 at 12:45 p.m. EDT. 

    Cloud-Native Days with Kubernetes is also incredibly proud to host Caroline Wong, Chief Strategy Officer of COBALT. Caroline is also an author, teaches cybersecurity courses on LinkedIn Learning, and similar to her fellow keynote speaker, hosts the ‘Humans of InfoSec’ podcast. With a background in communications and cybersecurity, Caroline holds deep-rooted expertise every attendee will want access to. 

    As Caroline says, “Cloud native is here; it is scaling, and it is not going anywhere. The more we can see the reality and necessity of what security must become, the better we will all be in the long run.” In her talk, ‘The Future of Cloud Native Security,’ Thursday Aug. 5 at 11 a.m. EDT, Caroline will share her observations on how companies must change the way they build security into their cloud-native projects, forecast what’s next for cloud-native security, and how organizations must double down on people and process innovation to overcome the misconceptions, education gaps and common mistakes we see when it comes to the cloud.

    Be sure to check out Caroline’s podcast ‘Humans of InfoSec’ here before joining her keynote session next week.

    It’s always important to listen. But when listening means driving ideas forward, opening your ears can be the most beneficial tool to be better than we were yesterday.

    So open your ears, get ready to listen and join us Aug. 4 and 5 at 9 a.m. ET for a much needed active listening experience! Register today.

  • Mark Your Calendars and Meet the Best in Tech at Cloud-Native Days with Kubernetes

    Mark Your Calendars and Meet the Best in Tech at Cloud-Native Days with Kubernetes

    After over a year of dreaded isolation, many of us are ready to return to the networking and social atmosphere of pre-COVID life. While physical proximity continues to be a struggle, virtual proximity through events like virtual summits and teleconference meetings, is getting increasingly more helpful amidst the transition.

    Here are the top 10 reasons why Cloud-Native Days with Kubernetes is a must-attend event:

    1. Cloud-Native Days with Kubernetes is a continuation of the virtual social interaction we’ve seen throughout the last year but offers attendees more than just a chance to talk with session leaders and speakers. 
    2. Sessions will be geared toward practitioners, managers and C-level executives, and led by industry thought leaders and doers in the cloud-native space, allowing attendees an opportunity to meet and network with experts in the cloud-native field. 
    3. At the end of this two day virtual summit, attendees will walk away with a better understanding of cloud native and its impact on the IT landscape.
    4. Cloud-Native Days is hardly short of talent with over 50 speakers holding featured, insight and spotlight sessions. 
    5. Attendees will have networking access to a variety of speakers through keynote sessions at Cloud-Native Days, but catching keynote speakers Tracy Miranda and Rosalind Radcliffe’s sessions will certainly be a highlight of the virtual summit. 
    6. Not only will attendees be able to network with speakers, by means of networking, attendees will have the opportunity to forge collaboration. Keynote speaker Tracy Miranda has some valuable words to share regarding projects born from collaboration. She says, “We had this idea that Continuous Delivery is bigger than just one project, and we should be working together to make things inter-operable and better for everybody. Then as we went around talking to people for that idea— when it resonated with other people— they really became fans, and they would be like, “How can we help? What can we do? This is how we build up on it.” So find that core set of folks who will be enthusiastic, and will get you through the honeymoon period.” 
    7. Learn from the best of the best in the cloud-native space. With cloud-native technologies becoming an integral part of IT environments, it’s incredibly valuable to learn from industry specialists changing the IT world as we know it. 
    8. Listen to the best of the best at Cloud-Native Days. It’s always important to listen. But when listening means driving ideas forward, opening your ears can be the most beneficial tool to be better than we were yesterday. 
    9. Get real-world insight into topics like: trends and best practices in the cloud-native space, addressing Kubernetes complexities, tackling cloud-native security from the onset, etc.
    10. Have fun while learning new things! Who says networking and learning can’t be fun? With so many exciting people, sessions and topics, attendees have a lot to look forward to at Cloud-Native Days with Kubernetes.

    Networking isn’t just about linking on LinkedIn anymore. Collaboration doesn’t come from a request, it comes from interaction, engagement and communication. Find all three and start collaborating at Cloud-Native Days with Kubernetes, Aug. 4 and 5 at 9 a.m. (ET). 

    Now mark your calendars and meet the best of the best in tech! Register today.

  • Learning from Loris Degioanni: Cloud-Native Days with Kubernetes Virtual Summit

    Learning from Loris Degioanni: Cloud-Native Days with Kubernetes Virtual Summit

    Keeping up with information can be challenging. With all these changes, you’re probably left wondering, “who can guide me through all this information?” Fortunately, Cloud-Native Days with Kubernetes is focused on giving attendees the tools they need to become proficient in cloud-native technologies. At the virtual summit, attendees can tune into our expert-led featured sessions and learn how to leverage cloud native technologies to move faster and more securely.

    Cloud-native technologies are quickly becoming an integral part of IT environments as organizations continuously accelerate their development efforts to meet business demands. Because of this, it’s incredibly valuable to learn from industry specialists changing the IT world as we know it. And who better to learn from than the industry thought leaders and doers in the cloud-native space? Through sessions touching on topics like security and observability, our featured tech titans will give you a better understanding of cloud native and its impact on the IT landscape.

    Today, the CI/CD pipeline is mainly built on open source tools – Kubernetes, Jenkins, GitLab, etc. Security has traditionally been closed, but it’s now clear the pace of innovation cannot be constrained by proprietary development models. Keynote speaker Loris Degioanni, CTO and founder of Sysdig, will discuss key practices needed for a secure cloud and container environment, including: what is required to increase security, visibility and simplicity in the cloud, lessons learned from major attacks like Kaseya and SolarWinds, ways to leverage Secure DevOps to not only ‘shift left,’ but also ‘roll right’ for detection and response, and how open source is the key ingredient to see all your signals in a constantly changing landscape.

    In his article, “Open Source is Taking Over Security,” published last year on The New Stack, Loris Degioanni elaborates on this idea that open source is essential to maintaining high security, stating, “I argue that, despite having lower penetration of open source, security is the industry that benefits the most from an open source approach. I also argue that open source will gradually take over and become the standard way to do security.” To understand this further, Loris breaks it up into a few key questions: Why is open source the best way to do security? and, Will open source become the standard way to do security?

    Let’s start with the most important question: Why is open source the best way to do security? Loris is adamant that open source is the key ingredient to security because of one thing – speed of innovation. Loris points out that the rise of widely adopted and open computing platforms like Kubernetes have had a big impact on how distributed, coordinated ecosystems can beat out a ‘behind closed doors’ single vendor 100% of the time. Loris writes, “On one hand, Kubernetes and cloud native have such a fast innovation pace that it’s hard for a vendor to keep up by itself. On the other hand, thanks to Kubernetes, for the first time we have a completely open platform to run our applications, where security can be natively integrated rather than being bolted on top.” 

    Open source also increases the speed of innovation because it empowers end users to work with vendors. Any user, regardless of size and level of sophistication, Loris says, can provide feedback in a tight loop and they can also contribute. So why is this relevant to security? As Loris explains, “The intrinsically fragmented nature of vulnerabilities and threats makes this bazaar-oriented approach to contributing very effective.”

    This brings us to Loris’s second question: will open source become the standard way to do security? Not only does Loris say yes, open source will become the standard way to do security, but in fact there is no escaping this. Using a metaphor of bad guys vs. good guys to describe cybersecurity battles, Loris says, “the army of the bad guys is big, smart, and aggressive. And the deck is stacked in their favor.” 

    So how do the good guys win in this scenario? Loris says the best chance at this is, “working together, as a team, leveraging each other’s strength, making sure that no energy is wasted.” Rather than having competing standards upheld by a variety of vendors, Loris is adamant that “a much better approach consists of leveraging a common set of standards that are deeply integrated in the platform, owned by the community, driven by consensus, on top of which all of the players can confidently innovate.”

    Much like Loris’s approach to open source, innovation and security are also valuable key practices at Cloud-Native Days with Kubernetes. Life moves fast. Innovation cannot afford to be slowed down, especially now. So begin your cloud-native information journey by tuning into our expert-led sessions, gathering your questions and learning from our talented speakers August 4 and 5 at 9 a.m. ET.

  • Maximizing Capabilities and the Importance of Value Stream Management

    Maximizing Capabilities and the Importance of Value Stream Management

    Even if we don’t use them  to the full extent, applications shape our entire lives. And more than half the time we have no idea what our applications are capable of. On a daily basis, the average person uses seven to eight apps on their mobile phone. Throughout the week, the average person uses 30 applications. But, how many of those applications do we thoroughly know how to use? That’s where Eric Robertson, SVP strategic advisor and Tim Stiling, manager of product marketing from ConnectALL come in. Both are speakers and will be holding sessions at TechStrong Con 2021.

    Tell us more about ConnectALL and what you’ve been up to lately.

    Tim: We really want to try to figure out how we can best deliver value to our customers’ businesses. On a very basic level, ConnectALL helps customers connect their tools! Now once your tools are connected—what you do with it—that’s where the fun can begin. I know Lance Knight, our president and COO, he has a fun saying where he talks about how it’s almost like electricity. So the electricity itself—kind of like the connecting of tools—it’s cool, but in and of itself doesn’t do anything. It’s what you can do with the electricity.

    To answer the second part of your question about what we’re up to lately, it’s really trying to find and figure out all those possibilities (synchronizing records, facilitating communication, triggering different actions, etc.) and making sure that our customers in the market are aware of it.

    Digital transformation is at the top of the mind for every organization and as consumer consumer demands are changing, in what ways has this affected the value stream management (VSM) industry?

    Eric: Companies are organizing their entire businesses around delivery of business goals that are essential to customers and are leveraging value streams as an essential part of their digital transformation mission. Basically this allows them to improve business IT integration and better manage changing priorities across different organizations. This is happening because we are seeing that organizational teams, the processes, the tools and tech platforms are constantly changing because they need to adapt to different conditions in the marketplace. As a result, value stream management is quickly being seen as essential for building, transforming, and optimizing those organizations’ technology enabled business models and that’s why it’s critical right now.

    Value stream management has kind of been a buzz word in the tech industry recently. Can you share the true business value behind utilizing value stream management?

    Tim: Ultimately with value stream management, it’s hard to say that this will lead to business value because business value could be different for every company. When it comes to value stream management, it’s more about the methodology and the mindset behind it. It’s all about this idea of continuous improvement. It helps you and your organization constantly drive toward your business goal by continuously improving and being better today than you were yesterday and better tomorrow than you are today. 

    Is VSM for every business? And if so, how can these businesses effectively start incorporating this solution into their overall business strategy and operations?

    Tim: Value stream management is absolutely for every business because whether they know it or not, every business has value streams. In fact, everything we do has a value stream, even something as simple as making a cup of coffee.

    One of the prevailing myths when it comes to value stream management is that it’s synonymous with DevOps or that you have to be in a DevOps transformation in order to be able to do it. Some organizations might be in an agile transformation or DevOps transformation—which is great, we aren’t saying don’t do that and do value stream management instead—VSM is a way to make that transformation more effective.

    You might already have all you need on your desktop right now, but there’s a chance you’re missing that link between your applications. It’s important to understand your applications—how they can maximize your workflow and cut down on time. So if you’re feeling disconnected, reach out to ConnectALL to connect all of your apps and don’t miss TechStrong Con 2021.

    Register today and tune in to Eric and Tim’s sessions on value stream management happening Wednesday, July 14 and Thursday, July 15. The clock is ticking!

  • A Special Message from Reddit Co-Founder Alexis Ohanian for TechStrong Con

    A Special Message from Reddit Co-Founder Alexis Ohanian for TechStrong Con

    As TechStrong Con approaches, Reddit Co-Founder Alexis Ohanian has shared an inspiring message for all developers and tech enthusiasts attending the virtual event. In the Cameo clip below, he reflects on his own journey in the tech realm and gives high praises to all the developers who spend every day doing the often “thankless” work that is building the technical infrastructure of the future.

    Tech innovation continuously showcases how it can revolutionize society. Alexis expressed how grateful he is to be a part of the tech community and to build things that are shaping the world we live in. Reddit is a prime example of tech’s ability to transform people’s lives. It blossomed from a small startup 16 years ago to this globally-recognized social hub today, where people can go to communicate about shared passions and ideas. 

    John Willis of Red Hat, Ian Khan of Futuracy, Tracy Ragan of DeployHub, Stephen DeWitt of CloudBees, Caroline Wong of Cobalt and many other industry luminaries will also share their stories and lessons learned at TechStrong Con, on July 14 and 15.

    At this year’s virtual event, attendees will learn all about DevOps, AppSec, cloud-native technologies, digital transformation, the future of hybrid and the many ways in which technology continues to improve the human experience. There will be an expo hall lined with booths featuring interactive chats and downloadable resources. Attendees will have the opportunity to network with peers, participate in giveaways, join a yoga class, check out a mixology demo and more.

    To see the full agenda and secure your free spot at the virtual event, visit the TechStrong Con website.

  • Change Is Knocking: The Future Readiness with Ian Khan

    Change Is Knocking: The Future Readiness with Ian Khan

    In preparation for TechStrong Con next week, MediaOps media guru Rebecca Auguste sat down with featured keynote speaker, CNN technology futurist, Forbes contributor and CEO and founder of Futuracy, Ian Khan to talk about future readiness.

    A globally recognized technology futurist and creator of the Future Readiness Score, Ian will be hosting a live session at TechStrong Con, “The Art and Science of Future Readiness,” on July 15 at 11:45 a.m. (EDT). In this session, Ian will help put a realistic picture around what businesses need to do and must to not just survive but thrive and why a measurable method for success is key to purpose, growth and profitability. But, what is future readiness? What does a technology futurist do? And why is future readiness important to digital transformation?

    As a stepping stone for what’s to come in next week’s live session, Ian’s interview with Rebecca not only sheds light on the questions above, but also how to make sense of the state of disruptive chaos in the world today. Modern technological change is impacting some businesses as it has never done so in the last 500 years. Within this era, the rules of success are somewhat different from what they were, even just 10 years ago, which is why Ian’s future readiness is as important as ever.

    You can read more about future readiness on Ian’s website here, but he says, “the problem has been that future readiness is a misunderstood area of management and leadership. You ask somebody if they are future ready and they will possibly tell you about how many technologies they are using or not using and that’s just one part of it. Future readiness has to be at the highest level of importance in your business because it dictates and governs everything that is happening whether you’re selling, marketing, you’re a servicing client, it encompasses everything to help you grow.”

    In addition to future readiness is your future readiness score. Ian says, “The future readiness score figures this out, helps you understand where do you stand with the respect of the systems of operation in the engagement category” and that, “organizations that are future ready have engagement mastered.” But it isn’t enough to read your readiness score. Ian is adamant that, “Your journey has to continue from there and you’ve got to keep on monitoring your future readiness score and work on improving it.”

    So how can businesses not only keep up with all the changes, but find ways to anticipate future trends? The most important thing is that, “You’ve gotta be quick to adapt and to respond. You can’t just wait and get paralyzed from what’s happening out there. As a leader, your responsibility now is to be fast, responsive and to be quick to do anything that is required. You’ve also got to have phenomenal observational powers now where you’re looking at short-term, medium-term and long-term trends and identifying information that is coming from there and incorporating that into your business.”

    Some advice Ian would give someone ready to start their journey with future readiness is that, “Change will continue happening to you. Change will continue knocking on the doors of your business. It’ll continue disrupting you and challenging you. Your sales models, your sales teams, there will always be competitors who will come up against your business so the environment is constantly going to change. Please expect that. Expect that every single day that you walk into work that you talk with your teams and customers and work with your customers to get them ready for change because that’s when they’ll love you. In order to make this golden exchange happen you’ve got to know what the change is, you’ve got to anticipate it, you’ve got to look into it. The future readiness score can help you do that. Or just being super aware of what’s happening in your world can do that. We’ve got to open our eyes to change, accept it, make it part of our everyday and success will knock at your doors.”

    Begin your future readiness journey at TechStrong Con. To see the full agenda and secure your free spot at the virtual event, visit the TechStrong Con website.

  • A Data-Driven Approach to DevOps: Tips for Improving Speed and Scale

    A Data-Driven Approach to DevOps: Tips for Improving Speed and Scale

    Data has an undeniable power in a business context — it can sway stakeholders, help identify pain points, and demonstrate how changes are making an impact on the company. As the creator of Jenkins, Kohsuke Kawaguchi has noticed from his conversations with business leaders in the industry that implementing a data-driven mindset can be a game changer in the DevOps journey. 

    While data may not initially seem like it provides a full enough picture for businesses to work with, it carries invaluable insights and a certain level of objectivity that allows for a smoother transition in the DevOps process. Additionally, adopting a data-driven approach helps to showcase the small wins in your DevOps journey that can help build more confidence and trust in the process. 

    In the interview below, Kohsuke teases his session, “Go Data Driven With Your DevOps: 5 Tips for Improving Speed and Scale,” at TechStrong Con.  On July 15, Kohsuke, along with fellow Launchable Co-Founder Harpreet Singh, will provide tips on how a data-driven approach to DevOps can help improve speed and scale. 

    To see the full agenda and secure your free spot at the virtual event, visit the TechStrong Con website.

  • No More Status Quo: Disruption and Reinvention through The Entrepreneur’s Weekly Nietzsche

    No More Status Quo: Disruption and Reinvention through The Entrepreneur’s Weekly Nietzsche

    Everyday we’re reinventing ourselves. Whether we’re reinventing knowledge through learning, or technology through development, nothing stays stagnant and disruption makes sure of that.

    In a TechStrong TV segment, MediaOps Co-Founder and Editor-in-Chief Alan Shimel sits down with Brad Feld, current managing director at Foundry Group and author of “The Entrepreneur’s Weekly Nietzsche: A Book for Disruptors” to discuss this reinvention and the importance of disruptors. 

    If you’re not familiar with Brad Feld, he’s a well known venture capitalist and author who’s had his hand in the startup community as an author and founder of TechStars, a capital market company. He teamed up with Dave Jilk, a former partner of Feld Technologies, Brad’s very first company. 

    To cycle back to the word “disruptor,” it’s one Brad wants you to hang on to. He says, “Anybody who is involved in being a disruptor of an industry whether you’re a founder or a leader or an employee of a company, we like to think this is applicable to what you’re doing.” 

    Because of their focus on disruptors, it’s only fitting that Brad and Dave chose to concentrate on one of the most disruptive philosopher’s in history: Friedrich Nietzche. As Brad says, “In the 1860s to the 1890s, when he wrote the body of his work, Nietzsche was very disruptive to the status quo – of everything.” Like Nietzche, if you’re an entrepreneur or in the tech community today, you’re challenging conformity and reinventing the world.

    While this book is intended for entrepreneurs, you certainly don’t have to be one to enjoy this book. “Entrepreneurial thinking is valuable for everybody in all aspects of life. Doesn’t mean you have to be an entrepreneur but the kind of mindset of an entrepreneur is powerful to understand,” says Feld. If you’re a disruptor, or simply enjoy learning, you’ll get a lot from this book.

    And if you’re worried about not understanding the philosophy component, fear not. “The Entrepreneur’s Weekly Nietzsche: A Book for Disruptors” is incredibly accessible. Brad uses very small quotes (one to three sentences) from Nietzsche and translates it into contemporary English. After each quote is a short essay intended to “provoke thought, not tell you the answer.” As Brad says, “One of the meta goals of this book is not to tell people what to do. It’s to stimulate thinking.”

    As a bonus to most quotes and essays, there’s actually a narrative written by an entrepreneur (some famous, some not-so-famous) discussing their experience and what they thought of when Brad and Dave gave them the quote. 

    With 52 different topics, this book is not meant to be gobbled down. While you can, you’ll get a lot more out of it when you dip-in and dip-out of areas that you’re interested in. Feld and Jilk’s hope is to simply get people to think: “We’re trying to help people stimulate thought around these ideas. Presumably any one of these topics is something you can ponder and meditate on.”

    “The Entrepreneur’s Weekly Nietzsche” isn’t an untouchable academic piece, rather a relatable reflection of the human experience. Talking about the importance of including his own experience in the book, Brad emphasizes, “I don’t write books for a living. I’m a venture capitalist for a living. I write books because I love to write, I love to read and I love to think. My motivation for the writing is part of my own experience learning.” 

    Whether you choose to read a chapter a week or every few weeks, Brad and Alan recommend you take each chapter on its own. Think about it and internalize it before moving on. And if you’re able to re-read chapters, that’s even better. “Today, what I find myself doing when I do these talks is I’m reading these quotes again and I’m discovering new things in the quotes and what they make me think,” says Brad. “Again, not trying to tell me the absolute truth from the quote, but the thought that it then stimulates.”

    If you’re into learning, disrupting or the entrepreneurial mindset, check out “The Entrepreneur’s Weekly Nietzsche: A Book for Disruptors” and attend Brad’s session at TechStrong Con 2021 Virtual Summit, on June 14, to enter his book giveaway.

  • No More Hot Potato: How Collaboration is Key in Application Security

    No More Hot Potato: How Collaboration is Key in Application Security

    Technology is accelerating at an unprecedented rate and companies with little digital footprint or experience in application security are struggling to keep up. With more and more breaches and vulnerabilities being detected in applications, people are shifting blame like it’s a game of hot potato. But it doesn’t have to be that way.

    With Shifting Left Virtual Conference rapidly approaching, Rebecca Auguste sat down with the CEO of ShiftLeft, Manish Gupta, to discuss how developers and application security teams can better collaborate to increase application security efficacy. The two talked about ShiftLeft’s strategy, how innovation and security can be at odds with one another, adopting modern solutions and everything in between.

    What is ShiftLeft? 

    ShiftLeft is a next generation application security company. As companies are moving rapidly adopting the cloud, developing software ever faster so they can deliver features to their customers and drive ever increasing revenue, in that race we are starting to leave security behind because we are still using legacy tools. The idea is we need to shift left and we have to start fixing vulnerabilities as early on as possible in the process thereby reducing our cyber risk.

    Are innovations and security at odds with each other now? 

    Historically they have been. Use of legacy technologies in a modern pipeline forces customers to choose between being agile delivering feature functionality faster or getting better at security. At ShiftLeft we are starting to show through our customer successes that that choice doesn’t have to be that way. We can become more agile and we can become more secure.

    Here are some important statistics from ShiftLeft customers:

    1. If you’re doing automated enforcement in ShiftLeft you are fixing 91.8% of the vulnerabilities
    2. If you’re not doing automated enforcement but you’re using a modern solution like ShiftLeft you’re fixing 58% of vulnerabilities in the first sprint.
    3. If you’re still stuck with a legacy solution, your team isn’t fixing 60% of the vulnerabilities ever – forget if it’s the first, second or third sprint. It becomes technical debt. 

    So why aren’t people adopting modern solutions like ShiftLeft and ditching legacy solutions?

    Legacy solutions ask developers to slow down because they have to take a few hours to go scan and dump a long list of vulnerabilities. As the developer, seeing hundreds of vulnerabilities is like a deer in the headlights. Because it’s a mountain of work, it’s easy for developers to want to ignore the problems. The question shouldn’t stop at “what are our applications consisting of?” The real problem gets solved when we start asking what do our applications contain and what vulnerabilities do they have that can be exploited, therefore how quickly can we fix them. It’s all about moving to be proactive, not reactive.

    How can development and security teams better collaborate to increase the efficacy of security with applications and software? 

    It’s extremely important for us to realize that developers are not responsible for security. Developers are measured, they are compensated to deliver feature functionality on time and to provide that feature functionality with minimum bugs. But bugs are not vulnerabilities. There is a lot of talk in the industry that developers should become responsible for application security. We aren’t there today but we can eventually.

    There are two important application personas: 

    • Application security: Application security has a mile wide and inch deep knowledge of applications and who is compensated on app security improvements.
    • Developers: Developers have a mile deep but inch wide knowledge of software because they are so focused on their own code.

    Both personas are required because application security cannot fix vulnerabilities in applications, the developer must do that. But developers aren’t going to want to do that unless that work is prioritized by application security.

    Key takeaway? Collaboration is essential to application security.

    We need to create a workflow that allows application security to meet their end goals such as: What are the vulnerabilities of an application? What are the critical vulnerabilities? How can I provide these vulnerabilities to the developer in a developer workflow without asking them to go to a different console so they can fix vulnerabilities as quickly as possible? We need to start seeing a workflow that allows both application security and developer personas to work collaboratively to improve application security.

    Shifting Left 2.0 is a two-day virtual conference taking place from 9 a.m. to 2 p.m. PDT on June 22nd-23rd that dives deep into application security in the modern tech space. To register for free and to check out the full agenda, visit the Shifting Left 2.0 website.

  • Live from JFrog Swamp Up 2021 – The Top 4 DevOps Headlines of 2025

    Live from JFrog Swamp Up 2021 – The Top 4 DevOps Headlines of 2025

    We’re reporting live from swampUP. If you want to join this great session and many others you can still grab your free pass here.