CodeSecure and FOSSA announced a strategic partnership and native product integration that enables organizations to eliminate security blindspots associated with both third party and open source code.
2018 DevOps Predictions from CYBRIC
January 18, 2018
As we start off 2018, it is obvious that the culture of DevOps in the enterprise is here to stay, but what of DevSecOps? From continued adoption of API-first solutions to core code development, below I discuss a few predictions I see on how DevOps and SecOps will further entwine in addition to how related technologies will evolve and impact business in 2018.
DevOps
The term "DevOps" continues to be used in too many situations and descriptors. For me, it's a cultural pattern grounded by "Collaboration, Automation, Measurement, and Sharing" (CAMS). In 2018, I think we will begin to see DevSecOps become the new DevOps. Security truly needs to be seamlessly embedded into the systems development life cycle (SDLC) and CI/CD pipeline, instead of an afterthought and a barrier to deployment.
Development Technology
2018 will see continued adoption of API-first solutions, microservices architectural patterns and more developers leveraging "Serverless" function as a service (FaaS) to deliver features at a higher velocity. Strategies around Machine Learning models to deliver AI solutions will be baked in from the start of a project.
Development Automation
Core code development won't be going away anytime soon, but more and more automated solutions that ensure that packages and libraries are always at the latest version will be adopted. The goal of automation will be focused on allowing developers to only worry about the core features that they are working on, not maintaining the "scaffolding."
Agile Development
It's surprising how many organizations still haven't (fully) adopted Agile methodology, and many are still simply "Wagile" (Waterfall-Agile). In 2018, Continuous Delivery will become table stakes for those who want to stave off disruption.
Continuous Development
The combined approaches of Continuous Integration, Continuous Delivery, Continuous Testing, and Continuous Deployment will continue to be implemented by Enterprises looking to deliver features to market at a higher velocity. This will also require cultural evolution where collaboration and feedback loops are tighter.
API (Application Program Interface)
Restful APIs should be a core part of solutions, especially as everything, including infrastructure, moves to a software-defined, programmatic world. APIs also allow for rapid integrations with potential partners and business expansion.
Industry News
April 16, 2025
Bauplan, a Python-first serverless data platform that transforms complex infrastructure processes into a few lines of code over data lakes, announced its launch with $7.5 million in seed funding.
April 15, 2025
Perforce Software announced the launch of the Kafka Service Bundle, a new offering that provides enterprises with managed open source Apache Kafka at a fraction of the cost of traditional managed providers.
April 14, 2025
LambdaTest announced the launch of the HyperExecute MCP Server, an enhancement to its AI-native test orchestration platform, HyperExecute.
April 14, 2025
Cloudflare announced Workers VPC and Workers VPC Private Link, new solutions that enable developers to build secure, global cross-cloud applications on Cloudflare Workers.
April 14, 2025
Nutrient announced a significant expansion of its cloud-based services, as well as a series of updates to its SDK products, aimed at enhancing the developer experience by allowing developers to build, scale, and innovate with less friction.
April 10, 2025
Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.
April 10, 2025
Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.
April 10, 2025
The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.
April 09, 2025
Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.
April 09, 2025
SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.
April 09, 2025
Akamai Technologies introduced App & API Protector Hybrid.
April 09, 2025
Veracode has been granted a United States patent for its generative artificial intelligence security tool, Veracode Fix.
April 09, 2025
Zesty announced that its automated Kubernetes optimization platform, Kompass, now includes full pod scaling capabilities, with the addition of Vertical Pod Autoscaler (VPA) alongside the existing Horizontal Pod Autoscaler (HPA).
April 08, 2025
Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.
