Collaborate Disseminate
ShiftLeft announced that its NextGen Static Analysis (NG SAST) product is now available on GitHub Marketplace. Modern static application security testing (SAST) products need to be purpose-built for developers. NG SAST is designed to bridge the gap bet… Continue reading ShiftLeft NG SAST now available on GitHub Marketplace
Podcast-Ep-2.1- ML, Automation & ShiftLeft at CapitalOne — A conversation with Vincent Weafer
https://medium.com/media/d9752cdc858ba8e31c8a1e8e4b8dba93/href
Vincent Weafer, SVP Security Engineering at Capital One in a convers… Continue reading Podcast-Ep-2.1- ML, Automation & ShiftLeft at CapitalOne — A conversation with Vincent Weafer
In this first part of a two-part post series, we’ll reconstruct a NoSQL injection and cover the basics of mitigating it. In the second part, we’ll look at Server-Side JavaScript and Blind Injection attacks against NoSQL databases.
If you&#… Continue reading Mitigating NoSQL Injection Attacks: Part 1
In order to scale application security (AppSec) to meet the pace of the software feature development, AppSec must engage developers with new workflows that balance security and productivity. In order to meet this challenge, today we are announcing new … Continue reading What AppSec Can Learn From Developers’ Feature Bug Workflows
Podcast-Ep-9 — From Darkness to Light
https://medium.com/media/913159bfa73b9b2b5773721ce8879314/href
In this episode of “Sources and Sinks, a conversation with ShiftLeft’s lead security researcher — … Continue reading Podcast-Ep-9 — From Darkness to Light
This blog is co-authored by Prabhu Subramanian, Lead Architect at ShiftLeft, and Seth Mason, Product Manager at D2iQ
DevOps. GitOps. DevSecOps. Developers are doing more builds of microservices, and therefore have more surface area prone to secur… Continue reading Enabling Developer-Friendly Security in Kubernetes for GitOps
ShiftLeft Scan ❤️ GitHub
It gives us great pleasure to announce that ShiftLeft Scan is now natively integrated with GitHub Code Scanning to help developers and teams keep their applications secure without slowing down their productiv… Continue reading ShiftLeft Scan ❤️ GitHub
Dev + Sec + Ops ! = DevSecOps
DevSecOps formula
Historically, security vendors and code scientists around the world have been looking for a single universal formula to represent the notion of DevSecOps.
In my previous posts, I had introduced Shift… Continue reading Dev + Sec + Ops != DevSecOps
Announcing ShiftLeft Scan — An integrated scanner for modern DevOps
It gives us great pleasure to announce Scan — a free and open-source security product from the ShiftLeft Incubator. Scan is built specifically … Continue reading Announcing ShiftLeft Scan — An integrated scanner for modern DevOps
As a passionate DevSecOps personnel, I wanted to build a portfolio of security tools that both the DevOps and the security community would love to use. The security tools marketplace is quite messy — people are forced to use, work and… Continue reading AppThreat is Joining the ShiftLeft Family