Resources

The ROI of Open Source Security with Forrester

We all understand the necessity of application security, but sometimes struggle attaching their cost to financial benefit. To date, the quantitative outcomes from newer technologies such as open source security are less clear.

Using Snyk to Secure Your Kubernetes Configurations

Learning Kubernetes is a challenge by itself - making sure you’ve added all the relevant security controls in your YAML adds another layer of complexity. Snyk’s NEW Kubernetes configuration analyzer provides guidance and fixes in context, so it’s easy to understand the relevant controls and implement them in your Kubernetes code.

Securing containers by breaking in with DoIT International

Security issues and cybercrime are rising to an alarming rate. In this webinar, we became the hacker and exploited vulnerabilities in packages that exist in the wild that might be part of your containers today. We showed you how to protect yourself to these threats by building up a pipeline and development workflow with security testing in mind.

Demystifying DevSecOps

We’ve all heard of the DevSecOps and ‘shift left’ buzz that is often presented as go-to solutions that will better secure applications and nurture security awareness within your team. But once we’re told this is the future, how do we go about putting this into practice in a way that the whole team will adopt? What are the key values and principles that Developers and DevOps engineers expect?

Ask Me Anything: Advancing DevSecOps in 2020

As organizations embrace digital transformation and pursue competitive advantages, demands on delivering secure code fast increase. Join our speakers, all of whom have spent 2019 speaking with development, operations, and security teams, to break down DevSecOps beyond the term, in an open “Ask Me Anything” discussion.

Setting up open source security for your full Bitbucket workflow

Join Or Fattal, our very own product manger, to see how quickly you can bake security into your Bitbucket cloud/server. Watch Or demonstrate how Snyk gets setup across the SDLC - from code management and CI/CD (Bitbucket Pipelines) through to Jira for complete coverage.

DevSecOps Paving the Way for End-to-end Security

Join Alyssa Miller of Snyk, a hacker, security evangelist, cybersecurity professional and public speaker with almost 15 years in the security industry, and Will Robinson, a sales engineer and DevOps specialist at Trend Micro. They outline how to achieve end-to-end application security throughout the DevOps cycle by protecting applications in runtime and fixing vulnerabilities at the source.

PCI Deep Dive

PCI is often over-discussed, with many security teams already familiar with the requirements and in many cases, the solutions to address them.

Serverless Security

This book reviews how the serverless paradigm affects the security of an application, and dives into the benefits it brings. More important, it helps you, the owner of the serverless application, understand what you should do to keep your serverless apps secure, and gives some practical tips on how to do so.

The State of Open Source Security Report 2019

This year’s State of Open Source Security report captures data from a survey of hundreds of open source developers and maintainers, data from public application registries, library datasets, GitHub repositories, and Snyk’s comprehensive vulnerability database (pulling in data from hundreds of thousands of projects).

DevSecOps Insights 2020

81% of security and development professionals believe developers are responsible for open source security - but many organizations are still unsure how to start building a culture and practice of DevSecOps. Puppet & Snyk’s study is digging deeper into the trends of DevSecOps adoption.

Securing Open Source Libraries: Managing Vulnerabilities in Open Source Code Packages

This book will help both development and application security architects and practitioners address the risk of vulnerable open source libraries and discuss why such vulnerable dependencies are the most likely to be exploited by attackers.