Checkmarx announced a new generation in software supply chain security with its Secrets Detection and Repository Health solutions to minimize application risk.
Rafay Systems announced plans to open source its Zero-Trust Access and GitOps services.
Developers will be able to take advantage of, and contribute to, these battle-tested services that significantly reduce the complexities associated with securing access to and automating the ongoing operations of Kubernetes infrastructure and modern applications. These two services are the first of many that Rafay intends to open source over time.
With the Zero-Trust Access and GitOps services available as open source projects, developers can address the multi-tenant access and automation requirements that these services were built to address. Developers can also collaborate with project contributors to further advance on-premises, hybrid, multi-cloud and edge use cases.
"As a member of the Cloud Native Computing Foundation (CNCF), we are extremely excited to deepen our engagement with the open source community," said Haseeb Budhani, CEO of Rafay Systems. "By open sourcing Zero-Trust Access and GitOps services, we are doing our part in furthering the community's goals of making cloud-native computing ubiquitous. We look forward to the community embracing these projects, and are eager to engage with developers and DevOps professionals who are open to partnering with the current cadre of contributors focused on accelerating Kubernetes adoption in enterprises."
Rafay's Zero-Trust Access service enables controlled, audited access for developers, SREs and automation systems to Kubernetes infrastructure, with just-in-time service account creation and user-level credentials management, and can easily be integrated with an enterprise's in-place RBAC/SSO solution.
By powering access to Kubernetes infrastructure from anywhere, Rafay's Zero-Trust Access service:
- Centralizes access control to entire fleets of Kubernetes clusters, regardless of where the user or system seeking access is located
- Secures kubectl access to all clusters with integrated enterprise RBAC/SSO
- Ensures compliance with internal security policies and industry regulations
- Provides immutable audit trails of all user and system access
GitOps is an efficient and effective approach to continuous deployment (CD) that leverages Git as a single source of truth for both infrastructure and applications. By being declarative, it provides for better standardization, enhanced security, and ultimately, improved productivity.
With Rafay's GitOps Service, enterprises can:
- Programmatically construct multi-stage pipelines for both applications and clusters
- Fully automate deployments and remove error prone, manual steps
- Guarantee that the desired state specified in your Git repos are instantly enforced on Kubernetes clusters
- Implement easy-to-use controls enabling developers and operations teams to collaborate delivering modern applications faster without sacrificing enterprise-level governance
"Modern infrastructure deserves modern approaches to technical challenges. Managing Kubernetes at scale is not only becoming more challenging and onerous, but also comes with great risk," said Hemanth Kavuluru, SVP of Engineering and Operations at Rafay. "We're always looking for new ways to automate infrastructure and application deployments with security and access control in mind. We look forward to sharing these technical capabilities with the developers and are excited to see how far we can extend these services in partnership with the cloud-native community."
Industry News
SmartBear has appointed Dan Faulkner, the company’s Chief Product Officer, as Chief Executive Officer.
Horizon3.ai announced the release of NodeZero™ Kubernetes Pentesting, a new capability available to all NodeZero users.
Veracode acquired certain assets of Phylum, including its malicious package analysis, detection, and mitigation technology.
AppViewX announced the completion of its acquisition by Haveli Investments.
Check Point® Software Technologies Ltd. has been recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Email Security Platforms (ESP).
Progress announced its partnership with the American Institute of CPAs (AICPA), the world’s largest member association representing the CPA profession.
Kurrent announced $12 million in funding, its rebrand from Event Store and the official launch of Kurrent Enterprise Edition, now commercially available.
Blitzy announced the launch of the Blitzy Platform, a category-defining agentic platform that accelerates software development for enterprises by autonomously batch building up to 80% of software applications.
Sonata Software launched IntellQA, a Harmoni.AI powered testing automation and acceleration platform designed to transform software delivery for global enterprises.
Sonar signed a definitive agreement to acquire Tidelift, a provider of software supply chain security solutions that help organizations manage the risk of open source software.
Kindo formally launched its channel partner program.
Red Hat announced the latest release of Red Hat Enterprise Linux AI (RHEL AI), Red Hat’s foundation model platform for more seamlessly developing, testing and running generative artificial intelligence (gen AI) models for enterprise applications.
Fastly announced the general availability of Fastly AI Accelerator.