Testing in production used to be a joke. In fact, it was a popular "Most interesting man in the world" meme. But, as life often imitates art, this meme has become reality. As it turns out, the best tests to learn from are the ones that match production, so developers ... Read More

Shifting left – embedding security processes and output into the development pipeline – has been the focus for integrating security into DevOps for some time. Now that enterprises are approaching critical mass in moving their cloud-native applications to production, runtime protection is attracting more attention – especially from attackers. Even ... Read More

DevOps has grown in popularity over the past few years, but a lot of questions, misconceptions and myths have taken root alongside its rapid rise. What is DevOps really about? Do DevOps teams actually care about security? What DevOps best practices are most helpful? Is DevOps only for the cloud? ... Read More

Infrastructure-as-code (IaC) was a game-changer in the evolution of infrastructure provisioning, but it didn’t take long for fast-growing organizations to feel the backlash from the “go fast and break stuff” culture and look for solutions to ensure that speed doesn’t come at the expense of quality ... Read More

Modern business relies on a complex array of digital services to deliver delightful customer experiences. To be competitive, these services must always stay on. Unfortunately, complex systems break. When they do, organizations often struggle to react quickly enough ... Read More

Many traditional methods of delivering secure access to infrastructure resources such as Linux & Windows servers, databases and Kubernetes clusters involve configuring multiple, complex technologies such as VPNs, secret vaults and privileged access management systems. These systems increase IT complexity and unnecessarily reduce security as savvy engineers find workarounds to ... Read More

The announcement of a Log4j vulnerability sent security and development teams into a tailspin—not once but multiple times. Throughout it all, WhiteSource has been providing tools for discovery and automated remediation, and working closely with our customers ... Read More

With modern IDEs, Git and CI/CD pipelines, developing z/OS-based applications can be as productive and streamlined as any other platform. Join this session for a comprehensive demo and Q&A covering the use of GitHub tools with mainframe-native ones like Endevor to optimize productivity through automation.  A hybrid approach empowers next-gens ... Read More

2021 has been a breakthrough year for value stream management (VSM). From the inaugural State of VSM report and expansion of the Value Stream Management Consortium to the rise of advanced VSM platforms, value stream management continues to grow as an industry ... Read More

Observability seems to be all the rage today -- but what does it mean, exactly? Is observability just another buzzword for monitoring? When you boil it down, the two are different in subtle ways: Monitoring tells you that something happened; observability tells you why something happened and gives you data-driven ... Read More