{"id":46520,"date":"2022-02-04T13:43:00","date_gmt":"2022-02-04T18:43:00","guid":{"rendered":"https:\/\/sdtimes.com\/?p=46520"},"modified":"2022-02-16T10:18:51","modified_gmt":"2022-02-16T15:18:51","slug":"how-these-companies-help-organizations-to-do-devsecops","status":"publish","type":"post","link":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/","title":{"rendered":"How these companies help organizations with DevSecOps"},"content":{"rendered":"

We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings. Their responses are below.<\/em><\/p>\n

\n
Guy Eisenkot, VP of product and co-founder of Bridgecrew by Prisma Cloud<\/b><\/h5>\n

As hybrid work environments and cloud infrastructure environments become the norm, organizations\u2019 attack surfaces are only getting larger and more complex. With less cohesive visibility into the multitude of tools and frameworks used across software supply chains, it\u2019s hard for organizations to keep up with security risks and best practices. To mitigate those risks brought about by cloud complexity and remote work, many organizations are embracing DevSecOps.<\/span><\/p>\n

Bridgecrew by Prisma Cloud helps organizations adopt DevSecOps seamlessly through continuous, proactive security measures for every team\u2014from engineering and DevOps to security and compliance.<\/span><\/p>\n

For engineering, Bridgecrew makes it easier to prevent infrastructure misconfigurations and vulnerabilities from progressing into build pipelines and production environments by surfacing feedback in developer tools. Via command lines and integrated development environments (IDE), Bridgecrew provides fixes as code so developers can adhere to secure coding practices.<\/span><\/p>\n

RELATED CONTENT:<\/strong>
\nSecurity perimeter is no more as attack surface continues to expand<\/b><\/a>
\nA guide to DevSecOps tools<\/a><\/strong>\u00a0<\/span><\/p>\n

For DevOps, Bridgecrew enables speed and agility by automating security guardrails throughout the development lifecycle. Bridgecrew also comes equipped with the tools DevOps need to keep their software supply chain secure\u2014from the individual components to the version control systems (VCS) and continuous integration (CI) pipelines that deliver them.\u00a0<\/span><\/p>\n

Lastly, for security and compliance, Bridgecrew provides unified visibility into the security posture of all cloud resources and real-time notifications and ticketing to enable cross-functional collaboration. These are crucial for DevSecOps to be effective in the hybrid work environment when employees work remotely in varying time zones.\u00a0<\/span><\/p>\n

With Bridgecrew by Prisma Cloud, organizations can bridge the gap between security and engineering regardless of where teams are located around the world.<\/span><\/p>\n

Jeff Williams, chief technology officer at Contrast Security<\/b><\/h5>\n

Contrast is a platform of products that tries to enable teams to do their own security. So in a remote kind of environment, it’s really important to empower the developers to have the ability to test their software locally, as part of every time they change the code, they’ll get instant results. And our philosophy is sort of, they shouldn’t have to change anything about the way that they build, or test or deploy their code, they should just do their normal process. And the security tooling should be the thing that does the work, and then alerts them if there’s ever a problem. But we don’t want the developers to have to take extra steps. Because what ends up happening is they get frustrated with those extra steps. If there’s false positives, they have to go do extra work for no reason to investigate those things. So we want to just empower them to just deal with the things that actually matter, make those changes themselves and check and clean code. And we want to do that really early in the development process. So that’s the role that Contrast plays \u2014 we’re just in the background doing our job. And if anything goes outside the guardrails a little bit, we help steer the developers back on track. Now, the security team can participate. They serve as managing the policy, they watch the metrics, they can go help projects that aren’t doing very well. But by monitoring all of their applications continuously, it gives you a very different viewpoint than if you’re just running tools, running scanners, kind of serially, one by one through your entire application portfolio. And remember, we’re typically working with organizations that have hundreds or thousands, or even ten of thousands of applications, all in development at any given time. So it is really a complex problem to deal with.<\/span><\/p>\n

Ev Kontsevoy, CEO of Teleport<\/b><\/h5>\n

Hybrid is the new normal. Hybrid work arrangements have put pressure on the corporate <\/span>network, and employees at different levels of seniority need to be able to connect to corporate <\/span>infrastructure from anywhere. Additionally, that infrastructure is increasingly complex. A typical <\/span>customer environment is itself hybrid with Linux and Windows servers, Kubernetes clusters, <\/span>databases, and internal applications like CICD systems and version control systems like GitLab. <\/span>In this environment, protecting modern applications requires the consolidation of all aspects of <\/span>infrastructure access into a platform built for a hybrid world. That platform is the Teleport Access <\/span>Plane, the easiest, most secure way to access all an organization\u2019s infrastructure. <\/span>The open-source Teleport Access Plane consolidates the four essential infrastructure access <\/span>capabilities every security-conscious organization needs: connectivity, authentication, <\/span>authorization, and audit. By consolidating all aspects of infrastructure access into a single <\/span>platform, Teleport reduces attack surface area, cuts operational overhead, easily enforces <\/span>compliance, and improves productivity. The Teleport Access Plane replaces VPNs, shared <\/span>credentials, and legacy privileged access management technologies, improving security and <\/span>engineering productivity.<\/span><\/p>\n

With Teleport, organizations can easily shift to remote work and increase their use of hybrid <\/span>cloud environments without impacting security or productivity. Teleport enables teams to <\/span>securely connect to your global infrastructure regardless of network boundaries and provides <\/span>identity-based access for humans, machines, and services, including fine-grained access <\/span>controls. It enables teams to achieve unprecedented visibility into infrastructure access and <\/span>behavior so they can meet and exceed compliance objectives.<\/span><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings. Their responses are below. Guy Eisenkot, VP of product and co-founder of Bridgecrew by Prisma Cloud As hybrid work environments and cloud infrastructure environments become the norm, organizations\u2019 attack surfaces are only getting … continue reading<\/a><\/p>\n","protected":false},"author":804,"featured_media":46522,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"cybocfi_hide_featured_image":"","footnotes":"","_links_to":"","_links_to_target":""},"categories":[2398,1],"tags":[15592,10244,8749,406,15507],"coauthors":[13640],"acf":[],"yoast_head":"\nHow these companies help organizations with DevSecOps - SD Times<\/title>\n<meta name=\"description\" content=\"We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How these companies help organizations with DevSecOps - SD Times\" \/>\n<meta property=\"og:description\" content=\"We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/\" \/>\n<meta property=\"og:site_name\" content=\"SD Times\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/SDTimesD2\" \/>\n<meta property=\"article:published_time\" content=\"2022-02-04T18:43:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-02-16T15:18:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1280\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"SD Times\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sdtimes\" \/>\n<meta name=\"twitter:site\" content=\"@sdtimes\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"SD Times\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/\"},\"author\":{\"name\":\"SD Times\",\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/person\/e0f273b980b8e16bc8d40ac339edafc6\"},\"headline\":\"How these companies help organizations with DevSecOps\",\"datePublished\":\"2022-02-04T18:43:00+00:00\",\"dateModified\":\"2022-02-16T15:18:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/\"},\"wordCount\":891,\"publisher\":{\"@id\":\"https:\/\/sdtimes.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg\",\"keywords\":[\"Bridgecrew\",\"Contrast Security\",\"DevSecOps\",\"Sonatype\",\"Teleport\"],\"articleSection\":[\"Buyers Guide\",\"Latest News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/\",\"url\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/\",\"name\":\"How these companies help organizations with DevSecOps - SD Times\",\"isPartOf\":{\"@id\":\"https:\/\/sdtimes.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg\",\"datePublished\":\"2022-02-04T18:43:00+00:00\",\"dateModified\":\"2022-02-16T15:18:51+00:00\",\"description\":\"We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings.\",\"breadcrumb\":{\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#primaryimage\",\"url\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg\",\"contentUrl\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg\",\"width\":1920,\"height\":1280},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/sdtimes.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How these companies help organizations with DevSecOps\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/sdtimes.com\/#website\",\"url\":\"https:\/\/sdtimes.com\/\",\"name\":\"SD Times\",\"description\":\"Software Development News\",\"publisher\":{\"@id\":\"https:\/\/sdtimes.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/sdtimes.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/sdtimes.com\/#organization\",\"name\":\"SD Times\",\"url\":\"https:\/\/sdtimes.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2014\/05\/deafaultlogo.png\",\"contentUrl\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2014\/05\/deafaultlogo.png\",\"width\":225,\"height\":90,\"caption\":\"SD Times\"},\"image\":{\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/SDTimesD2\",\"https:\/\/x.com\/sdtimes\",\"https:\/\/www.linkedin.com\/company\/sdtimes\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/person\/e0f273b980b8e16bc8d40ac339edafc6\",\"name\":\"SD Times\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/person\/image\/12a3751daacf16712c32bd81bc5a3040\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b13d7778dc0e9a25bd7775c197be5132?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b13d7778dc0e9a25bd7775c197be5132?s=96&d=mm&r=g\",\"caption\":\"SD Times\"},\"url\":\"https:\/\/sdtimes.com\/author\/sd-times-staff\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How these companies help organizations with DevSecOps - SD Times","description":"We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/","og_locale":"en_US","og_type":"article","og_title":"How these companies help organizations with DevSecOps - SD Times","og_description":"We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings.","og_url":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/","og_site_name":"SD Times","article_publisher":"https:\/\/www.facebook.com\/SDTimesD2","article_published_time":"2022-02-04T18:43:00+00:00","article_modified_time":"2022-02-16T15:18:51+00:00","og_image":[{"width":1920,"height":1280,"url":"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg","type":"image\/jpeg"}],"author":"SD Times","twitter_card":"summary_large_image","twitter_creator":"@sdtimes","twitter_site":"@sdtimes","twitter_misc":{"Written by":"SD Times","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#article","isPartOf":{"@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/"},"author":{"name":"SD Times","@id":"https:\/\/sdtimes.com\/#\/schema\/person\/e0f273b980b8e16bc8d40ac339edafc6"},"headline":"How these companies help organizations with DevSecOps","datePublished":"2022-02-04T18:43:00+00:00","dateModified":"2022-02-16T15:18:51+00:00","mainEntityOfPage":{"@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/"},"wordCount":891,"publisher":{"@id":"https:\/\/sdtimes.com\/#organization"},"image":{"@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#primaryimage"},"thumbnailUrl":"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg","keywords":["Bridgecrew","Contrast Security","DevSecOps","Sonatype","Teleport"],"articleSection":["Buyers Guide","Latest News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/","url":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/","name":"How these companies help organizations with DevSecOps - SD Times","isPartOf":{"@id":"https:\/\/sdtimes.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#primaryimage"},"image":{"@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#primaryimage"},"thumbnailUrl":"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg","datePublished":"2022-02-04T18:43:00+00:00","dateModified":"2022-02-16T15:18:51+00:00","description":"We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings.","breadcrumb":{"@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#primaryimage","url":"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg","contentUrl":"https:\/\/sdtimes.com\/wp-content\/uploads\/2022\/02\/pexels-pixabay-164425.jpg","width":1920,"height":1280},{"@type":"BreadcrumbList","@id":"https:\/\/sdtimes.com\/security\/how-these-companies-help-organizations-to-do-devsecops\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sdtimes.com\/"},{"@type":"ListItem","position":2,"name":"How these companies help organizations with DevSecOps"}]},{"@type":"WebSite","@id":"https:\/\/sdtimes.com\/#website","url":"https:\/\/sdtimes.com\/","name":"SD Times","description":"Software Development News","publisher":{"@id":"https:\/\/sdtimes.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sdtimes.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/sdtimes.com\/#organization","name":"SD Times","url":"https:\/\/sdtimes.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sdtimes.com\/#\/schema\/logo\/image\/","url":"https:\/\/sdtimes.com\/wp-content\/uploads\/2014\/05\/deafaultlogo.png","contentUrl":"https:\/\/sdtimes.com\/wp-content\/uploads\/2014\/05\/deafaultlogo.png","width":225,"height":90,"caption":"SD Times"},"image":{"@id":"https:\/\/sdtimes.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/SDTimesD2","https:\/\/x.com\/sdtimes","https:\/\/www.linkedin.com\/company\/sdtimes\/"]},{"@type":"Person","@id":"https:\/\/sdtimes.com\/#\/schema\/person\/e0f273b980b8e16bc8d40ac339edafc6","name":"SD Times","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sdtimes.com\/#\/schema\/person\/image\/12a3751daacf16712c32bd81bc5a3040","url":"https:\/\/secure.gravatar.com\/avatar\/b13d7778dc0e9a25bd7775c197be5132?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b13d7778dc0e9a25bd7775c197be5132?s=96&d=mm&r=g","caption":"SD Times"},"url":"https:\/\/sdtimes.com\/author\/sd-times-staff\/"}]}},"_links":{"self":[{"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/posts\/46520"}],"collection":[{"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/users\/804"}],"replies":[{"embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/comments?post=46520"}],"version-history":[{"count":3,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/posts\/46520\/revisions"}],"predecessor-version":[{"id":46530,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/posts\/46520\/revisions\/46530"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/media\/46522"}],"wp:attachment":[{"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/media?parent=46520"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/categories?post=46520"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/tags?post=46520"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/coauthors?post=46520"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}