Digital accessibility — making sure your website, mobile site and apps are accessible to all users, including people with disabilities — is increasingly a DevOps requirement that can't be ignored ...
Vendor Forum
Microservices, container orchestration, virtualized machines; these and other tools have created an entire industry to support the fast, continuous development approach. But while efficiency and speed bring competitive advantages, something is still missing: security. With the luxury of speeds comes the by-product of overly pushed data during the development phase. This opens the question of which is more important — speed or security? ...
Cloud adoption has steadily increased as more enterprise companies are turning toward a multi-cloud approach for increased scalability, flexibility and maintaining the best-in-breed solutions for independent workloads. This current cloud era driven and disrupted by multi-cloud and open source technologies has created unique challenges for companies who are under pressure to build, run and secure their modern applications and cloud infrastructures effectively and securely ...
Once you have been using Selenium for a while and are comfortable writing test cases, you can focus on techniques and design principles to get your UI test automation to the next level. Design patterns are covered here in Part 2 ...
The benefits of a feature flag rollout are clear to many DevOps teams. The ability to control the gradual release of a feature, and then be able to retract the feature without having to restart the entire release, has made the job of development and operations teams a lot easier ...
The final chapter of this blog series looks at Factor 12, Admin Processes, and shares security-focused advice for this step that developers and ops engineers can follow during the SaaS build and operations stages.
On reading this year's Accelerate State of DevOps Report 2019, it was easy to make a clear conclusion: the usability of tools affects productivity. This is perhaps not surprising in itself, but the report finds that tool usability, above all else, is a key indicator of performance ...
Speed of deployment affects your bottom line, making it one of the core DevOps metrics. Continuous integration (CI) and continuous delivery (CD) are now established principles that are standard in almost every business. The huge advantages that come with incremental, ongoing changes and deployment via Kubernetes, microservices, and containers have been proven and embedded into every business practice. While DevOps tools and practices are standard almost everywhere, there's still one DevOps tool left to go ...
The security posture to adopt when striving for DEV/prod parity as you move through the Twelve-Factors is to ensure that product secrets are not shared. Step 11 suggests treating logs as event streams ...
The concept of infusing security into the mindset and the processes of software delivery is often called "DevSecOps." Since developers, testers, and operations staff are all part of the same DevOps team, they must all take responsibility for their software's security, from design through development, and out into production. Here are some practical steps that teams can take to introduce security into their DevOps pipelines, making them DevSecOps pipelines ...
In the first blog of this series, I discussed what would it take to insert security into DevOps and arrived at the helpful mnemonic SECURIDY to capture the key requirements. As a continuation of that blog, I thought it would be valuable to take some of the popular technologies and measure them against this framework to see which are still well-suited for today's world of DevOps, as well as which fall short and why ...
With the speed of innovation ever on the rise, customers expect the latest, greatest features and updates at their fingertips. That means businesses have to ship and deliver more features and products than ever before, faster than before — making it harder for often-overburdened technical teams to keep up with the rapid pace of change as they innovate and execute. With developer resources in high demand, no-code, low-code solutions promise to clear up backlogs and spark innovation by building up a citizen developer workforce ...
Today, performance bugs and memory bugs are the least of the worries facing the developer community. Instead, a new crisis has surfaced: security bugs. Security bugs are so much more concerning than the other bugs because security bugs will get you "pwned!" ...
Cloud infrastructure has seen accelerating levels of automation over the past few years. While the new, unprecedented level of automation delivers benefits like speed and agility, it also introduces enormous risk. The probability of identities misusing privileges (whether intentional or not) has increased greatly for any enterprise planning a cloud migration or already embracing the cloud ...