Red Hat announced the availability of Red Hat Ansible Automation Platform on Google Cloud, providing a common and flexible IT automation solution that extends from the cloud, to the datacenter and out to the edge without additional complexity or required skills.
XebiaLabs Launches New DevOps Risk and Compliance Capability for Software Releases
January 14, 2019
XebiaLabs launched an advanced chain of custody, security and compliance risk assessment tracking for software releases available for enterprise software delivery.
According to Derek Langone, CEO of XebiaLabs: “To effectively manage software delivery at enterprise scale, DevOps teams need a way to accurately manage and report on the ‘chain of custody’ and other compliance requirements throughout the software delivery pipeline. It’s also vital for them to have visibility into the risk of release failures or security issues as early in the release process as possible. That’s when development teams can address issues the quickest without impacting the business.”
The XebiaLabs DevOps Platform provides a single pane of glass for technical and business stakeholders to track the release chain of custody across the end-to-end CI/CD toolchain, from code to production. And, with instant visibility into security and compliance issues, teams can take action to ensure that release failure risks, security vulnerabilities, and IT governance violations are resolved early in the software delivery cycle.
XebiaLabs’ latest features for chain of custody, security, and compliance include:
- Enhanced chain of custody reporting that offers a new all-in-one deployment dashboard. This dashboard provides a detailed view into what is being deployed, who is deploying it, and what the deployment status is—no matter which deployment tools are being used or what type of environments are being targeted, whether on premise or private, public, or hybrid cloud. Developers, release managers, and compliance staff can immediately see what is deployed where and track deployments back to feature development and delivery.
- New security risk dashboard for software releases that combines automated risk assessment for software delivery pipelines with detailed security and compliance information from commonly used tools such as Black Duck, Fortify, SonarQube, and Checkmarx. Visualizing security risk helps teams shift security and compliance activity left, so they can detect application vulnerabilities earlier and address them during development—before those vulnerabilities make it to production.
- New at-a-glance compliance overviews that summarize IT governance violations for common standards such as OWASP, PCI 3.2, and CWE/SANS. Compliance scanning activity and rule violations are presented in an easy to digest format that makes sense for technical, business, and compliance teams who are part of the software delivery process.
The XebiaLabs Deployment dashboard and Security and Compliance dashboard are available now.
Industry News
February 06, 2023
Cequence Security has enhanced the testing capabilities within its Unified API Protection Platform with the availability of API Security Testing.
February 02, 2023
Red Hat announced a multi-stage alliance to offer customers a greater choice of operating systems to run on Oracle Cloud Infrastructure (OCI).
February 02, 2023
Snow Software announced a new global partner program designed to enable partners to support customers as they face complex market challenges around managing cost and mitigating risk, while delivering value more efficiently and effectively with Snow.
February 02, 2023
Contrast Security announced the launch of its new partner program, the Security Innovation Alliance (SIA), which is a global ecosystem of system integrators (SIs), cloud, channel and technology alliances.
February 01, 2023
Red Hat introduced new security and compliance capabilities for the Red Hat OpenShift enterprise Kubernetes platform.
February 01, 2023
Jetpack.io formally launched with Devbox Cloud, a managed service offering for Devbox.
February 01, 2023
Jellyfish launched Life Cycle Explorer, a new solution that identifies bottlenecks in the life cycle of engineering work to help teams adapt workflow processes and more effectively deliver value to customers.
January 31, 2023
Checkmarx announced the immediate availability of Supply Chain Threat Intelligence, which delivers detailed threat intelligence on hundreds of thousands of malicious packages, contributor reputation, malicious behavior and more.
January 31, 2023
Qualys announced its new GovCloud platform along with the achievement of FedRAMP Ready status at the High impact level, from the Federal Risk and Authorization Management Program (FedRAMP).
January 30, 2023
F5 announced the general availability of F5 NGINXaaS for Azure, an integrated solution co-developed by F5 and Microsoft that empowers enterprises to deliver secure, high-performance applications in the cloud.
January 30, 2023
Tenable announced Tenable Ventures, a corporate investment program.
January 26, 2023
Ubuntu Pro, Canonical’s comprehensive subscription for secure open source and compliance, is now generally available.
