As organizations increasingly rely on APIs to streamline their operations and drive innovation, the need to securely authenticate across these critical communication channels is more important and complex than ever. The Corsha State of API Secrets Report 2023 highlights the need for better tools, technologies, and tradecraft around API secrets ...

The conventional wisdom in security, and mobile app protection in particular, was that consumers care about features, not security. At mobile brands across the globe, a healthy internal debate exists over this dichotomy. Mobile developers say features are more important. Cyber security teams say security is more important. Operations teams serve as the tie breaker, often choosing whatever will get the app out the door the fastest ...

Containers are a popular way to deliver applications. They're well suited to those working in many environments or building software in microservices. But what are containers exactly? How do containers work? Why should you use them? And how do they differ from related services? This post explains everything beginners need to know about containers ...

When developing software, you want the application to be as ready as possible before exposing it to the real world. In production, the software needs to be able to deal with many different scenarios, which we can prepare for using a virtual test environment that mimics the actual system ...

The threat landscape is only expanding as businesses are adopting new digital technologies such as cloud computing, automation, AI, and ML at greater scale and with greater speed. With stakes higher than ever, it is imperative for organizations, irrespective of their business nature and size, a roust Security Posture to identify, prevent, and respond to ever-evolving cyber threats ...

When someone mentions lead times in software delivery, it's often unclear whether they mean the definition of lead times from Lean Software Development, the one from DevOps, or something else entirely. In this post, I look at why there are so many definitions of lead time and how you can put them to use ...

Open source isn't a strategy, it's a philosophy of collaboration. It's the fabric of millions of commercial projects in industries like FinTech, IT and AI. But there's something curious about open source — it makes up the majority of codebases, so surely the packages have hundreds of eyes keeping watch on their security posture? Unfortunately not ...