DevSecOps

8 posts

How we built Escape DAST's proprietary web application crawling algorithm and what makes it innovative
Application Security

How we built Escape DAST's proprietary web application crawling algorithm and what makes it innovative

In this article, we'll show how we created our web application crawling algorithm to ensure complete testing coverage for modern applications.
Mohamed Mongi Saidane
Gabriel Marquet
Antoine Carossio
Mohamed Mongi Saidane, Gabriel Marquet, Antoine Carossio
14 min read
DevOps vs DevSecOps: exploring the key differences and how to make the shift
DevSecOps

DevOps vs DevSecOps: exploring the key differences and how to make the shift

Companies are constantly searching for ways to deliver high-quality products quickly and efficiently. The evolution of DevOps revolutionized the industry by merging development and operations teams, breaking down silos, and fostering collaboration and communication. However, as startups and businesses strive for agility and speed, security often falls by the wayside.
Quentin Lieumont
Quentin Lieumont
9 min read
How to automate and secure deployment within GitLab CI with Syft and Grype
DevSecOps

How to automate and secure deployment within GitLab CI with Syft and Grype

Ensuring the security of your code is paramount in today's fast-paced development landscape. Thankfully, the automation capabilities of CI/CD pipelines can make this process seamless. In this article, we'll guide you through setting up a GitLab CI pipeline that automates code security checks, allowing you
Quentin Lieumont
Quentin Lieumont
7 min read
Top 7 DevSecOps Best Practices
DevSecOps

Top 7 DevSecOps Best Practices

DevSecOps aims at integrating security inside the development process. It can be hard to know where to start. In this article, learn the best practices to implement DevSecOps in your engineering teams.
Tristan Kalos
Tristan Kalos
5 min read
DevSecOps 101 Part 4: Scanning Docker Images With Trivy
DevSecOps

DevSecOps 101 Part 4: Scanning Docker Images With Trivy

This last part of the DevSecOps 101 series shows you how to scan your Docker images using Trivy, an open-source security scanner to find misconfigurations and vulnerabilities.
Tristan Kalos
Tristan Kalos
5 min read
DevSecOps 101 Part 3: Scanning Live Web Applications with Nuclei scanner
DevSecOps

DevSecOps 101 Part 3: Scanning Live Web Applications with Nuclei scanner

This article is part of a series about integrating security tooling in the development process. You can find the rest of the articles here: * Part 1: Detecting Insecure Dependencies (SCA) * Part 2: Detecting Insecure Source Code (SAST) * Part 4: Scanning Docker Images With Trivy Note: This tutorial is based on
Tristan Kalos
Tristan Kalos
4 min read
DevSecOps 101 Part 2: Detecting Insecure Source Code
DevSecOps

DevSecOps 101 Part 2: Detecting Insecure Source Code

In this tutorial, we will learn how to detect and fix vulnerable Python code using Semgrep.
Tristan Kalos
Tristan Kalos
4 min read
DevSecOps 101 part 1: Software Component Analysis (SCA)
DevSecOps

DevSecOps 101 part 1: Software Component Analysis (SCA)

Learn to detect/avoid vulnerable dependencies in app development with Software Composition Analysis (SCA) using a voluntary vulnerable Python app
Tristan Kalos
Tristan Kalos
3 min read