Google spent $2.3 million on bug bounties in 2017. Should your company jump in? Here are five key things to keep in mind before you go all in.
Robert Lemos
Apr 24, 2018
Bug bounties pay off: Are they right for your company?
5 things to know
How do you know if engineering lead is the next step in your career? How do you become one? What do they do? Here are some answers.
Mitch Pronschinske
Apr 24, 2018
Engineering manager's guide: 30+ resources for dev team leads
Chart a path to success
Here's what moving to DevSecOps looks like in 2018, as well as other important takeaways from RSA, including AI and the GDPR.
John P. Mello Jr.
Apr 23, 2018
The state of cybersecurity: DevSecOps gets real at RSA
Shift left is on
From AI to explainability, visualization, and data lakes, technologies beyond machine learning will change the way organizations fight data fraud.
Kedar Samant
Apr 20, 2018
Get the most from machine learning: What's next for detecting data fraud
Expose the fakes
 Report
Discover emerging security operations trends inside organizations in the public and private sectors around the globe. 
State of Security Operations 2018 
Despite all the noise and flim-flam, infosec still begins and ends with people—people like you.
Richi Jennings
Apr 19, 2018
#RSAC2018: The infosec escalators we love to hate
Security Blogwatch
 Guide
Get Gartner’s key findings, recommendations and representative vendors. Download the Gartner Market Guide for AIOps Platforms. 
Gartner Market Guide for AIOps Platforms 
 Report
Learn SDN adoption and operational challenges from 302 network professionals and IT strategists. 
Software Defined Networks Have Arrived: Why SDN Needs Management Tools 
No single measure is sufficient to guarantee the security of web applications. Look for these vulnerabilities at every stage of the app lifecycle.
Shivajee Samdarshi
Apr 19, 2018
Top web app vulnerabilities: How to secure your pipeline
Stop the leakage
These 20 statistics sum up the state of IT operations. Here's what every operations management team should know.
Jaikumar Vijayan
Apr 18, 2018
20 IT Ops stats that matter
Crunch these numbers
Fuzz testing can seem unsporting, but it will help your team quickly find where extra code bulletproofing is needed.
Michael Fritzius
Apr 18, 2018
Intro to fuzz testing: How to prevent your next epic QA fail
Pester your code
These ChatOps tutorials, videos and articles include real-world setups from big-name tech companies and experts.
Mitch Pronschinske
Apr 17, 2018
27 ChatOps resources to inspire tech team building
All together now
Here's how to attract great DevOps candidates and retain rock stars on your team.
Ericka Chickowski
Apr 17, 2018
10 ways to build highly effective DevOps teams
Dream-team dreamin'
Agile practices are expanding rapidly in organizations—and getting results. Here's what's working, and where the blockers remain.
Linda Rosencrance
Apr 16, 2018
State of Agile Report: 5 key takeaways for dev teams
What success looks like
Security must be the bedrock throughout the organization and product development lifecycle, and ingrained in the culture.
Scott Clarke
Apr 13, 2018
4 steps to shift security to your product development lifecycle
Culture change can happen
 Report
Dimensional Research survey identifies benefits of a hybrid IT monitoring approach, and the role automation and machine learning can play. 
Hybrid Cloud: New Challenge For Monitoring Solutions 
Previous attempts at password replacements have failed. Be cautious of dancing on the bleeding edge.
Richi Jennings
Apr 12, 2018
WebAuthn/CTAP: Final countdown for passwords? Don't count on it.
Security Blogwatch
You're testing the code, but who's testing the tests? Enter the mutants.
Michael Fritzius
Apr 12, 2018
Mutation testing: How to test your tests
Rise of the code mutants
Security alerts are opening the door for ways to improve code checking and generation by combining publicly available data with its unique data set.
John P. Mello Jr.
Apr 11, 2018
GitHub dependency graph delivers: 4M open-source vulnerabilities exposed
Cash in on app sec gold
 Report
Discover the characteristics that distinguish more advanced companies from those just starting their digital journey. 
Forrester Digital Business 2018: Benchmark Your Digital Journey 
Kubernetes is complex, so secure default settings are vital to deploying it safely. Are you open to these hacker exploits?
Rory McCune
Apr 11, 2018
A hacker's guide to Kubernetes security
Is your container door open?
Here's how design thinking can deliver on DevSecOps, and five ways to get started.
Robert Wood
Apr 10, 2018
How design thinking delivers on DevSecOps
Security by design
Developing cloud-native apps goes against some basic assumptions for writing software. Here's how to avoid three common traps.
Vallery Lancey
Apr 10, 2018
3 cloud-native challenges: How to get your app behavior in check
Train your code well
Network automation depends on the right culture, as well as the right tools. Here's why, and how to get it right.
Matt Oswalt
Apr 9, 2018
How to succeed with network automation: Experimentation
Get the culture right
 Report
Security teams must integrate and automate app sec testing in the software life cycle.
Gartner Magic Quadrant for Application Security Testing 2018
Dev teams that master software security will also crack the code on how to influence cultural changes across the whole organization.
Ayman Sayed
Apr 6, 2018
How to build in DevSecOps: Grow culture from the ground up
Plant the seed for org change
Cloud-native architectures are a potent competitive weapon, but what does it mean to be cloud-native? Here are three examples.
Abby Kearns
Apr 5, 2018
Cloud-native architectures are reshaping the enterprise
Your continuous delivery future
No service is perfectly secure, but white-hat researchers are on your side. What can you learn from others’ mistakes?
Richi Jennings
Apr 5, 2018
Panera Bread's breach response: Chew on this infosec fail
Security Blogwatch
 Report
IT Central Station recommends testing tools and practices for CI environments. 
Testing in the Agile Era: Top Tools and Practices 
Cloudbursting is a great idea, but it's just not practical for most organizations. You can still achieve some of the benefits, though. Here's how.
Stefan Bergstein
Apr 4, 2018
Cloudbursting reality check: Get real about scaling via cloud
Hate to burst your balloon...
 Report
Download the Application Security Research Update now to find out the top five app sec risks that threaten your business. 
Application Security Research Update: Top 5 App Sec Risks 
Get your SIEM system geared up for GDPR with these best practices from data protection experts.
Jaikumar Vijayan
Apr 4, 2018
How to get your SIEM up to speed for GDPR
Data protection done right
Want stakeholders to review your test plans? Keep them to one page or less. Here's how to do it.
Amy Reichert
Apr 3, 2018
Get agile with your test plan: How to streamline
Keep it short and sweet
Software bugs that arise from requirements issues are the most expensive to fix. Here's how to test them before you start coding.
Evgeny Tkachenko
Apr 3, 2018
5 key attributes of requirements testing: Know before you code
Spec it out first
The key to moving faster lies in building and scaling a high-performing technology organization. "Accelerate" shows you why.
Stephanie Overby
Apr 2, 2018
7 takeaways to "Accelerate" your DevOps
Pedal to the metal
Show More