For the last few years, cloud-native technologies like microservices, serverless, and Kubernetes have been increasingly dominant in the technology stack of modern engineering teams. Why? First of all, they work seamlessly with modern cloud environments, they're scalable, resilient, and enable continuous delivery of software in an agile fashion. But all these benefits don't come without drawbacks ...

Debt. No matter how you slice it, debt is rarely a good thing. In the world of software development, security debt — the accumulation of unresolved flaws in code over time — poses an unrelenting challenge. As organizations increasingly move toward a DevSecOps model in which application security practices are introduced early and applied continuously throughout the SDLC, they are well positioned to decrease their security debt ...

The COVID-19 pandemic has been a disruptive event for development teams and companies alike, unsurprisingly, according to a recent survey of developers across the world by JRebel by Perforce ...

The adoption of Cloud Native Architecture and use of microservices is starting to take off and Kubernetes is at the forefront of the technologies enabling this trend. However, while Kubernetes provides you with many features that make deploying and running microservices easy, there are few additional services that need to be enabled in order for developers/devops to be productive and make applications maintainable. Logging is one such vital service ...

COVID-19 has forced almost every industry to rethink their everyday business strategies. As IT teams and core personnel continue working remotely for the foreseeable future, critical industries accustomed to in-person interactions like financial services will need to implement the necessary tools and services to ensure sensitive data remains safe, and in compliance with strict privacy laws. Unlike some sectors, however, the financial services sector is getting it right, stepping up to ensure their database management never falls behind ...

Organizations are scooping up application scanning tools to implement their application security program, but they often fall short of their expectations of such a program. Because each tool produces large and different data sets, development teams are often buried under mountains of findings without a clear path towards action. This ineffective process is problematic in many ways ...

The practice of "shift-left testing" has gained a foothold among DevOps teams that seek to leverage the benefits of early-stage software testing. Why is it that the same concept of continuous testing post-production and post-deployment, a strategy of "shift right testing," hasn't received the same recognition from DevOps community? ...