staging-devopsy.kinsta.cloud

Author: Veronica Haggar

  • Paxos Secures In-Principle Approval for Major Payments Institution License from the Monetary Authority of Singapore

    NEW YORK & SINGAPORE, March 10, 2022 — Paxos, the leading regulated blockchain infrastructure platform, announced it has received in-principle approval from the Monetary Authority of Singapore (MAS), a premier financial regulator in Asia-Pacific, to operate digital payments token services under the Payment Services Act 2019. With this license, Paxos becomes one of the first blockchain services providers to meet the highest standard of regulation in both New York and Singapore.

    MAS introduced the Payments Services Act as a framework for financial services companies to safely expand into the digital asset ecosystem, and with its Major Payments Institution License, Paxos is now able to offer its leading digital asset and blockchain products and services to customers domiciled in Singapore. Paxos is one of the earliest digital asset operators to secure this licensing, underscoring the company’s commitment to operating with transparency and integrity for its customers. The license will also help Paxos to support its current partners in expanding their services into Asia.

    MAS’ in-principle approval follows Paxos’ success in securing the first limited purpose Trust charter for digital assets from the New York Department of Financial Services in 2015. This achievement represents the company’s latest efforts to expand its global regulatory stack.

    Rich Teo, co-founder and CEO, Paxos Asia, commented, “We founded Paxos in Singapore in 2012 because of this jurisdiction’s forward-thinking approach to innovation and oversight. Since then, we’ve distinguished ourselves globally as the most trusted blockchain infrastructure provider because we’ve relentlessly pursued regulatory oversight. We believe it’s the only way for consumers and financial institutions alike to truly experience the benefits of the blockchain and digital assets. We’re excited to have MAS as our regulator, and with their oversight, we’ll be able to safely accelerate consumer adoption of digital assets globally by powering regulated solutions for the world’s biggest enterprises.”

    About Paxos

    Paxos is the leading regulated blockchain infrastructure platform. Its products are the foundation for a new, open financial system that can operate faster and more efficiently. Today, trillions of dollars are locked in inefficient, outdated financial plumbing that is inaccessible to millions of people. Paxos is replatforming the financial system to enable assets to instantaneously move anywhere in the world, at any time, in a trustworthy way.

    Paxos uses technology to tokenize, custody, trade and settle assets. It builds enterprise blockchain solutions for institutions like PayPal, Interactive Brokers, Meta, Mastercard, MercadoLibre, Bank of America, Credit Suisse, Societe Generale and Revolut. Paxos is a top-funded fintech company with more than $540 million raised from leading investors including Oak HC/FT, Declaration Partners, Founders Fund, Mithril Capital and PayPal Ventures. With offices in New York, London and Singapore, Paxos takes a global approach to modernizing the financial system.

  • Radware Report: Malicious Web Application Attacks Climb 88%

    Other findings: Enterprises face increasingly “professional” attackers taking charge of the cloud environment

    Mahwah, NJ, March 10, 2021—Radware® (NASDAQ: RDWR), a leading provider of cyber security and application delivery solutions, today released its 2021–2022 Global Threat Analysis Report. The report findings underscore 2021 as the year of the web application attack. Between 2020 and 2021, the number of malicious web application requests climbed 88%, more than double the year-overyear growth rate in distributed denial-of-service (DDoS) attacks, which were up 37% over 2020.

    The unprecedented increase in web application attacks did not, however, prevent DDoS from making a name for itself in 2021. The report details how last year saw multiple record-breaking DDoS attacks and ransom denial-of-service (RDoS) earn its place in the threat landscape. At the same time that big attacks were making headlines, the volume of micro floods, attacks which often go undetected, rose nearly 80% compared to 2020.

    “The statistics tell a story about bad actors. They are getting smarter, more organized, and more targeted in pursuing their objectives — whether that be for money, fame, or a political cause,” said Pascal Geenens, director of threat intelligence for Radware. “In addition, cybercriminals are shifting their attack patterns — from leveraging larger attack vectors to combining multiple vectors in more complex-to-mitigate campaigns. Ransomware operators and their affiliates, which now include DDoS-for-hire actors, are working with a whole new level of professionalism and discipline — something that we have not seen before.”

    Radware’s 2021-2022 Global Threat Analysis Report reviews the most important cyber security events in 2021 and provides detailed insights into DDoS and web application attack developments as well as unsolicited network scanning trends. Key takeaways from the report include:

    • Cloud-Scale DDoS Attacks are in the Forecast: As more businesses migrate critical resources and applications to the public cloud, attackers are adapting their tactics and techniques to match the scale of public cloud providers. While enterprises should not be immediately alarmed by reports of huge attacks, they do need to be aware that DDoS attacks are a part of their threat landscape, irrespective of their geography or industry. Companies hosting services in the public cloud need to be prepared for cloud-scale attacks.
    • Ransom DoS (RDoS) Gangs Take Charge: In 2020, there was an uptick in DDoS attacks against organizations that did not pay a ransom demand on time. In 2021, RDoS confirmed its pervasive presence in the DDoS threat landscape with several campaigns. This included attacks targeting VoIP providers worldwide, which sparked concern for critical infrastructure.
    • Ransomware Operators Turn to Triple Extortion: In 2021, more sophisticated and better organized operators advanced their tactics, adding more extortion capabilities to their arsenal. To bring reluctant victims back to the negotiating table, they launched triple extortion campaigns by combining not only cryptolocking and data leaks, but also DDoS attacks. As a result, the flourishing underground economy supported by ransomware operators is seeing a new demand for DDoS-for-hire services.
    • Micro Floods Make a Big Showing: While the number of large attack vectors (above 10Gbps) declined 5% between 2020 and 2021, micro floods (less than 1Gbps) and application-level attacks rose nearly 80% higher. By shrewdly combining a large number of micro floods over longer periods of time, attackers put organizations at greater risk of having to constantly increase infrastructure resources, such as bandwidth, and network and server processing, until the service can become cost prohibitive.

    Other key results from the 2021-2022 Global Threat Analysis Report include:

    DDoS Attacks 

    In 2021, the number of malicious DDoS events increased by 37% per customer compared to 2020. Europe, the Middle East, and Africa (EMEA) and the Americas each accounted for 40% of the attack volume in 2021, while the Asia Pacific region accounted for 20%.

    Average 2021 DDoS attack volumes per customer grew by 26% in 2021 compared to 2020.

    The top attacked industries in 2021 were gaming and retail, each accounting for 22% of the attack volume on a normalized basis. These two industries were followed by the government (13%), healthcare (12%), technology (9%), and finance (6%).

    Web Application Attacks 

    The number of malicious web application requests grew 88% from 2020 to 2021. Broken access control and injection attacks represented more than 75% of web application attacks.

    The most attacked industries in 2021 were banking and finance, along with SaaS providers, together accounting for more than 28% of web application attacks. Retail and high-tech industries ranked third and fourth, each with almost 12% of the web security events, followed by manufacturing (9%), government (6%), carriers (6%), and transportation (5%).

    Radware’s complete 2021-2022 Global Threat Analysis Report can be downloaded here. The report leverages intelligence provided by network and application attack activity sourced from Radware’s Cloud and Managed Services, Global Deception Network, and threat research team.

    About Radware

    Radware® (NASDAQ: RDWR) is a global leader of cyber security and application delivery solutions for physical, cloud, and software defined data centers. Its award-winning solutions portfolio secures the digital experience by providing infrastructure, application, and corporate IT protection, and availability services to enterprises globally. Radware’s solutions empower enterprise and carrier customers worldwide to adapt to market challenges quickly, maintain business continuity, and achieve maximum productivity while keeping costs down. For more information, please visit the Radware website.

    Radware encourages you to join our community and follow us on: Facebook,  LinkedIn, Radware Blog, Twitter, YouTube, and Radware Mobile for iOS and Android.

    ©2022 Radware Ltd. All rights reserved. Any Radware products and solutions mentioned in this press release are protected by trademarks, patents, and pending patent applications of Radware in the U.S. and other countries. For more details, please see: https://www.radware.com/LegalNotice/. All other trademarks and names are property of their respective owners.

  • InfluxData Launches InfluxDB University

    San Francisco, CA, March 9, 2022 – InfluxData, creator of the leading time series platform InfluxDB, today announced the launch of InfluxDB University (InfluxDB U), an online education platform for customers and developers working with time series data. InfluxDB University focuses on giving developers the technical skills they need to build applications with InfluxDB through both on-demand and live instructor-led courses taught by InfluxData and industry experts. Courses on InfluxDB University are available today at no cost.

    “We think about the developer first in everything we do, ensuring they have the tools and resources needed to build and integrate applications with time series data,” said Brian Mullen, Chief Marketing Officer, InfluxData. “We meet developers where they are on the learning curve. Whether they’re brand new to InfluxDB or an advanced builder of time series applications, every developer can easily find the path and course work that is most relevant and most attuned to their individual journey.”

    The launch of InfluxDB University reinforces InfluxData’s commitment to delivering faster Time to Awesome™ to developers building applications with InfluxDB. Delivered through an intuitive learning platform, InfluxDB University courses offer technical resources and teach best practices to reduce the time and effort to build real-time applications. Participants can choose weekly trainings and workshops, led by qualified instructors who answer questions live during sessions. Alternatively, participants can select on-demand, self-paced courses if they prefer an independent learning experience.

    “InfluxDB University eliminates many of the common barriers to application building with time series data, which reinforces InfluxData’s commitment to developer happiness,” said Dr. Angelo Fausti, Software Engineer, Vera C. Rubin Observatory. “There’s a wealth of knowledge in these courses, and InfluxData is a true partner committed to ensuring we have the skills we need to be successful.”

    “InfluxData supports developers wherever they are in their time series journey,” said Jamie Milton, Senior Analytics Consultant, Fort Digital. “As a partner, we are excited to have InfluxDB University as a resource to continue to educate and support our customers to adopt best practices and get the most out of their time series data.”

    InfluxDB University is now live with introductory courses covering key elements of the platform, including InfluxDB Cloud, Telegraf and the Flux querying language. Additional courses cover more advanced topics around InfluxDB Enterprise and building IoT applications with InfluxDB. InfluxData will continue to add new courses and expand course content as new products and features are added to InfluxDB.

    To get started with InfluxDB University, visit www.influxdbu.com. For more information about how developers and organizations are using InfluxDB, visit the InfluxData website or sign up for a free cloud trial. To join the InfluxDB community, visit the InfluxData Community Slack channel.

    About InfluxData
    InfluxData is the creator of InfluxDB, the leading time series platform. We empower developers and organizations, such as Cisco, IBM, Siemens and Tesla, to build real-time IoT, analytics and cloud applications with time-stamped data. Our technology is purpose-built to handle the massive volumes of data produced by sensors, systems or applications that change over time. Easy to start and scale, InfluxDB gives developers time to focus on the features and functionalities that give their apps a competitive edge. InfluxData is headquartered in San Francisco, with a workforce distributed worldwide. For more information, visit www.influxdata.com.

  • Noetic Cyber and Rumble Partner to Provide Complete Visibility into Organizations’ Cyber Assets and Attack Surface

    Joint solution delivers unique insights into cybersecurity asset management and cyber risk across cloud and on-premises

    Boston, MA, March 9, 2022 — Noetic Cyber, a cloud-based continuous cyber asset management and controls platform, today announced an integration with Rumble Network Discovery, a network discovery and asset inventory solution for IT and OT environments. This partnership gives security teams a complete view of all assets in the organization, across on-premises networks and the cloud, revealing the current security state of all their assets and mapping the critical cyber relationships between them.

    Cyber asset discovery and inventory is a critical building block for any cybersecurity program. As new assets and devices come online, organizations need to employ solutions that provide greater context to the ever-changing nature of today’s digital infrastructure. Noetic’s partnership with Rumble delivers an end-to-end cybersecurity asset management solution that provides security teams with complete asset visibility and automation to address the issues they uncover.

    Rumble is an asset inventory and network visibility solution that can identify managed and unmanaged devices on the network with precision. Co-founded by HD Moore, best known as the creator of Metasploit, Rumble can accurately fingerprint assets–without requiring credentials, agents, or SPAN ports.

    “Cyber risk management is based on having a solid asset inventory, and most companies struggle to discover unmanaged and rogue devices,” said Chris Kirsch, CEO and Co-Founder of Rumble. “Noetic’s integration with Rumble ensures that cyber risk takes into account not only managed devices, but also unmanaged ones that typically have a higher risk factor.”

    Noetic’s powerful automation and workflow engine empowers security teams to drive corrective action. By leveraging Rumble’s unauthenticated active discovery capabilities, Noetic has access to high-fidelity data to combine with other sources help security teams generate a map of the cyber relationship of all their assets, prioritize workload based on cyber risk, correct technical drift and close security coverage gaps.

    Key integration features include:

    • Rapid time-to-value – The Noetic and Rumble connector comes with preconfigured workflows, functions and queries to help accelerate usage.
    • Increase visibility across your environment – Rumble’s unique scanning capabilities uncover unmanaged devices, including orphaned assets and IoT/OT. The Noetic platform uses these insights, together with other security and IT management tools, to uncover policy drift and security coverage gaps across the cloud and on-premises.
    • Find problems once, continuously remediate – Noetic’s comprehensive automation workflow engine makes ongoing asset inventory and remediation simple and less resource intensive.
    • Optimize existing IT and security tools – Updated metadata uncovered by the Rumble and Noetic integration can feed into relevant security and IT management tools to improve efficacy and drive value from existing investments.

    “We believe that this partnership with Rumble will provide our joint customers with the complete cyber asset coverage they need in today’s threat environment,” said Paul Ayers, co-founder and CEO of Noetic Cyber. “By combining proactive network scanning with the correlated insights provided in the Noetic platform, we are able to deliver highly accurate information on the total state of cybersecurity asset management across organizations.”

    For more information on the partnership between Noetic Cyber and Rumble, you can register for the upcoming webinar on March 31st at 12:00pm EST – https://go.noeticcyber.com/rumble-webinar.

    About Noetic Cyber
    Noetic provides a proactive approach to cyber asset and controls management, empowering security teams to see, understand, fix and improve their security posture and enterprise ecosystem. Our goal is to improve security tools and control efficacy by breaking down existing siloes and improving the entire security ecosystem. Founded in 2019, Noetic is based in Boston and London. For more information, visit www.noeticcyber.com, or follow us on LinkedIn or Twitter.

    About Rumble, Inc.
    Rumble was founded in 2018 by HD Moore, the creator of Metasploit, to provide a modern, active discovery tool that finds and identifies everything on a network–without credentials. Rumble is a network discovery and asset inventory platform, purpose-built to help organizations definitively know the networks in use and every device connected to those networks. The company is backed by Decibel Partners, a global venture capital firm backed by Cisco. To see what Rumble can do, try Rumble Professional free for 21 days or sign up for the free Starter Edition.

  • LogicGate Advances Audit Solution, Creating Ultimate Visibility for Holistic GRC

    Risk Cloud’s Audit Applications eliminate silos between risk, compliance, audit teams 

    Chicago, IL, March 9, 2022 — LogicGate®, a leading provider of transformative risk and compliance solutions through its Risk Cloud® platform, upgrades its audit capabilities with bundled Applications and features. LogicGate’s audit upgrade puts the right tools in the hands of internal auditors so they can save time, eliminate redundancy, and collaborate seamlessly across risk, compliance and internal audit functions for smarter decision-making. Internal auditing is an essential part of a holistic GRC program and, with these enhancements, Risk Cloud connects audit to other key areas of a risk management program.

    “With our expanded audit capabilities, we want our customers to be able to tell the full audit story — not just part of it — as audit is critical to a holistic GRC program,” said Jon Siegler, Chief Product Officer at LogicGate. “With these improvements, LogicGate customers have access to a one-stop-shop for all things audit. We’ve automated time consuming tasks and provided more in-depth reporting capabilities. These all equip our customers to better align audit with all risk-related initiatives, adding to the entire GRC story.”

    Internal auditors need to identify problems and correct lapses in compliance workflow and processes before they’re discovered externally and ensure their company meets ever-changing compliance standards. To make that happen, they need agile, personalized functionality that keeps up with the speed of risk. Risk Cloud’s powerful audit solution is built to be customized, with an easy-to-use, drag-and-drop interface so auditors can define granular permissions and roles for each Application, quickly format and pull robust reports, and enable cross-functional collaboration. Furthermore, Risk Cloud critically enables auditors and LogicGate customers to automate mundane tasks while maintaining a single source of truth for controls, assessments, risks, and mitigation.

    Internal auditors rely on software to validate internal processes and meet increasingly complex industry governance standards. This is accomplished through LogicGate’s Risk Cloud Applications and its Risk Cloud Exchange (RCX), an ecosystem designed to inspire risk programs by providing LogicGate customers with a holistic look into the interconnected world of GRC. Customers can utilize the following Risk Cloud Applications for their audit processes:

    • Internal Audit Management Application

    • SOX Control Testing Application

    • CMMC Self-Assessment Application

    • Controls Management Application

    • SOC 2 Compliance Application

    • HITRUST Controls Management Application

    • NIST CSF Assessments Application

    • SCF Control Assessments Application

    To learn more about how Risk Cloud can support internal audit as part of a holistic GRC program, visit LogicGate.com and download LogicGate’s new ebook, How to Make Your Work Life Exponentially Easier With a Holistic GRC Program.

    About LogicGate 

    LogicGate®, creator of the Risk Cloud® platform and Risk Cloud Exchange (RCX), is redefining the way businesses think about risk. Through the proactive management of governance, risk and compliance (GRC) processes via the no-code, agile Risk Cloud, hundreds of customers have improved organizational efficiency, reduced costs and enabled revenue generation and retention. In addition to earning recognition for its technology innovation from Gartner, Forrester and G2, the global company has received accolades from Crain’s Chicago Business, Built in Chicago and the Chicago Tribune for its company culture and was recognized in Inc. 5000 2021.

  • Tasktop Joins Forces with Broadcom to Connect Data for Value Stream Management

    Broadcom ValueOps Connectors Powered by Tasktop Unites Data and Eliminates Silos, Helping Organizations Better Measure Business Value During Software Development

    VANCOUVER, BC., Mar 8, 2022 — Tasktop, the leading value stream management (VSM) insights provider, today announced a collaboration with Broadcom® to provide the technology that powers Broadcom’s ValueOps Connectors, a solution that delivers bidirectional synchronization of data between Broadcom’s ValueOps Value Stream Management Solution and the software development tools used by data-driven enterprises. This solution has been adopted by dozens of shared Broadcom and Tasktop customers.

    Despite the investments businesses make on Agile and DevOps, most enterprises are still not adequately responsive or adaptive—according to Forrester® only 16% can release more than once a month. Tasktop’s VSM platform helps businesses bridge the gap between software delivery and business outcomes by breaking down the silos, identifying and removing bottlenecks, eliminating waste, and accelerating software delivery.

    Additionally, data used to make business decisions is often unreliable, hard to find, and stuck in silos. Broadcom’s ValueOps Connectors, powered by Tasktop, gives enterprises the ability to collect and unify data across values streams; remove data from silos throughout the enterprise to create complete data sets across all tools and teams; increase collaboration between teams that are using different tools in distributed environments; and eliminate errors related to manual data collection.

    “Every business is a software business and accessible, reliable data is needed to derive value during the software delivery process. This requires solutions to connect technology and the business with the right metrics to enable more effective enterprise digital transformation,” said Dr. Mik Kersten, CEO at Tasktop. “Broadcom’s ValueOps Connectors powered by Tasktop help uncover data lost in silos, the key to unlocking all information needed for effective value stream management.”

    “Data in isolation does not tell the full picture. Eliminating data silos is the first step towards making informed business decisions to better align product development and support overall business strategy,” said Jean-Louis Vignaud, Head of ValueOps Product Group. “Our leading VSM solution leverages these ValueOps Connectors to bring data together to reveal new stories and power value streams.”

    To learn more about ValueOps Connectors, visit broadcom.com/valueops-connectors

    About Tasktop

    Tasktop’s value stream management platform enables enterprises to master software at scale. Leading brands, including half of the Fortune 100, use Tasktop to provide real-time visibility into the health of product value streams, allowing them to make better decisions and align with business goals. Tasktop connects with existing tools and overlays the end-to-end value stream to provide the abstractions, automations, visualizations and forensics needed to practice value stream management on a daily basis. Learn more about Tasktop at tasktop.com and follow us on Twitter @tasktop.

  • Technology Leaders Launch SustainableIT.org to Address Climate Change

    Global Technology Leaders Join Delphix in Founding Nonprofit to Advance Sustainability

    Redwood City, CA, March 8, 2022 – Today, a think tank of global technology leaders and Delphix, the industry leader for DevOps test data management, announced the formation of SustainableIT.org, a nonprofit organization focused on advancing global sustainability through technology leadership.

    “Sustainability is the megatrend of the century,” said Jedidiah Yueh, Founding Director of SustainableIT.org and Delphix Founder and CEO. “For too long, sustainability has been a problem for someone else to solve. Today, we’re joining forces with technology leaders from the world’s largest organizations to make sustainability our collective problem to solve.”

    Over the next decade technology systems will dramatically increase energy consumption and related environmental and carbon impact. And digital transformation programs are increasingly putting consumer data privacy at risk, a major governance concern.

    Yet most organizations independently define their approach to sustainability, with no standard metrics or reporting for the three pillars of sustainability: environmental, societal, and governance.

    SustainableIT.org will unite IT leaders and experts from around the world to define best practices and standard metrics for all three pillars of sustainability in order to drive transparency and progress toward a sustainable future.

    “IT leaders and teams want to have more of an impact on sustainability initiatives. Launching SustainableIT.org represents an important moment in time for empowering IT to fulfill its promise—not just innovating for the business and our customers but to help save the world,” said Brian Kirkland, Choice Hotels CIO.

    SustainableIT.org is a nonprofit governed by global technology leaders with the support of partners and the technical advisor, Delphix. The founding board of directors includes:

    As part of its mandate, SustainableIT.org will define sustainable transformation programs by industry, author best practices and frameworks, set standards and certifications, provide education and training, and raise awareness for environmental and societal programs that make our organizations and the world sustainable for generations to come.

    “At Delphix, sustainability is core to our business and value. Our DevOps Data Platform reduces the environmental impact of application environments by 10x, and we govern and protect consumer data privacy for many of the world’s biggest brands,” said Yueh. “But we can do more. SustainableIT.org is our chance to galvanize the world’s largest organizations to take clear and transparent actions that lead to a sustainable world.”

    About SustainableIT.org

    SustainableIT.org is a nonprofit organization focused on advancing global sustainability through technology leadership. Our mission is to define sustainable transformation programs by industry, author best practices and frameworks, set standards and certifications, provide education and training, and raise awareness for environmental and societal programs that make our organizations and the world sustainable for generations to come. Follow us on LinkedIn.

    About Delphix

    Delphix is the industry leader for DevOps test data management.

    Businesses need to transform application delivery but struggle to balance speed with data security and compliance. Our DevOps Data Platform automates data security, while rapidly deploying test data to accelerate application releases. With Delphix, customers modernize applications, adopt multi-cloud, achieve CI/CD, and recover from downtime events such as ransomware up to 2x faster.

    Leading companies, including Choice Hotels, Banco Carrefour, and Fannie Mae, use Delphix to accelerate digital transformation and enable zero trust data management. Visit us at www.delphix.com. Follow us on LinkedIn, Twitter, and Facebook.

  • Opsera and Octopus Deploy Partner to Help Organizations Accelerate DevOps Adoption and Overall Software Delivery Management

    Opsera and Octopus Deploy combine no-code DevOps orchestration with continuous deployment automation to launch software delivery teams into modern DevOps practices simply and easily

    SAN FRANCISCO, March 8, 2022 — Opsera, the Continuous Orchestration platform for DevOps, today announces its partnership with Octopus Deploy. With this integration, software delivery teams can quickly, securely, and seamlessly create a no-code orchestration layer for end-to-end software supply chain management.

    Learn more about the Opsera and Octopus Deploy integration by attending this free webinar on April 12, 2022: https://www.opsera.io/events/opsera-and-octopus-integration.

    Today, organizations face the complexity of deploying applications across multiple clouds and environments to keep pace with innovation and customer demands. To address the need for deployment efficiency, Octopus provides one tool to accelerate reliable, repeatable, and traceable deployments across clouds and on-premises. However, adding an orchestration layer to deployment processes is critical to ensure continuous deployment is achieved. Expertise in multiple proprietary scripting languages, domain-specific languages, and configuration files are typically required to orchestrate delivery tasks amongst tools. Using Opsera’s no-code orchestration solution reduces this complexity and allows organizations to rapidly scale DevOps processes with freedom of tool choice and fully automated deployment pipelines and workflows. Opsera also eliminates the need to write manual glue code and custom scripts.

    With the Octopus and Opsera integration, users enjoy:

    Increased velocity and reduced barrier to entry

    Configuration as Code can be complex but Octopus offers a simple Configuration as Code solution that balances the full power of Git with the usability of Octopus. Opsera then provides further benefits by giving developers the ability to manage Octopus deployments across multiple clouds and environments in parallel (i.e. VMs, Kubernetes, EC2, AKS, EKS, Functions, serverless, database deployments, etc.) via no-code orchestration platform.

    Improved security and compliance

    Octopus offers built-in manual intervention steps which Opsera extends on so software delivery teams gain reporting and tracking via a single source of truth to ensure strict audit and compliance measures are met. Opsera provides no-code scripting that lets developers insert approval gates into the pipeline process (security, quality, change management, etc.) for repeatable, auditable, and compliant software delivery.

    Security and secrets management

    Octopus provides built-in support for managing configuration variables and secrets that vary as software releases are promoted through environments. Opsera extends this functionality through its integration with third-party secrets management solutions, like HashiCorp Vault, with support for any deployment type in just a few clicks. Hashicorp Vault secures, stores, and tightly controls access to tokens, passwords, certificates, encryption keys, custom deployment scripts, and for protecting secrets and other sensitive data. Opsera offers built-in integration to Hashicorp Vault and it enables customers to integrate Vault variables to Octopus deployments quickly and securely.

    Customizable reporting and metrics

    It’s critical that all stakeholders, from CXO to engineering and product owners, understand which KPIs to use to measure deployment success and have full visibility into those metrics. Octopus provides dashboards that show you what version of your application is deployed to what environment. Users can see who deployed which release to what environment, when they did it, and if it was successful or not. Opsera complements this with 100+ KPIs adhering to the set standards from DORA, DoD, and NIST DevSecOps metrics.

    “The Opsera and Octopus integration offers the speed and control software delivery teams need to keep pace with modern DevOps,” said Vishnu Vasudevan, Head of Product at Opsera. “Multi-cloud and multi-environment deployments are challenging but proliferating in the enterprise. Combining the flexibility of tool choice and no-code automation of Opsera with Octopus Deploy’s exceptional deployment automation capabilities means release engineers and developers can deploy across environments faster, better and secure with strict security and compliance measures in place with 360 degree visibility from planning to operations including Value Stream Management.”

    “We’re excited to see Opsera’s integration of Octopus Deploy. This will allow customers to take advantage of Octopus Deploy’s strengths in continuous deployment automation. With this new integration, software teams will be able to orchestrate their CI/CD pipelines with Octopus’ deployment capabilities,” said Octopus VP of Product, Colin Bowern.

    Schedule a demo to see the Opsera and Octopus integration in action: https://www.opsera.io/schedule-a-demo

    About Opsera

    Opsera is the first Continuous Orchestration platform for next-gen DevOps that enables choice, automation, and intelligence across the entire software life cycle. It offers simple, self-service toolchain integrations, drag-and-drop pipelines, and unified insights. With Continuous Orchestration, development teams can use the tools they want, operations teams gain improved efficiency, and business leaders have unparalleled visibility. Opsera believes DevOps has transformed from an aspiration to a practical science, and Continuous Orchestration is the future to help organizations accelerate DevOps adoption and reach peak innovation velocity.

    About Octopus

    Founded in 2012, Octopus Deploy helps DevOps teams at over 25,000 companies accelerate reliable, repeatable, and traceable deployments across clouds and on-premises infrastructure. Octopus provides an API-first approach, built-in multi-tenancy, security, release management, and deployment and runbook automation across all teams, projects, and tech stacks. Our customers get best practices with access to 500+ automation step templates. Octopus also integrates with hundreds of technologies, including Azure, AWS, GCP, and Kubernetes. Companies use Octopus Deploy to minimize downtime, deliver more features, and meet their compliance needs.

  • Cider Security Raises $38 Million to Bring The First AppSec Operating System To Market

    The first-of-its-kind AppSec Operating System, which is already deployed at dozens of organizations worldwide, enables Security and Engineering Teams to build AppSec programs in minutes

    Tel Aviv, ISRAEL, March 7, 2022 –  Cider Security, the world’s first AppSec Operating System, emerged from stealth today, announcing that it has raised $38 million in funding, with a recent Series A round led by Tiger Global Management. Joining the round was the lead investor from Cider Security’s seed financing, Glilot Capital Partners, with participation from Glilot’s early growth fund, Glilot+.  

    The diversity, velocity, and dynamic nature of today’s engineering ecosystem have introduced a wide array of new security challenges and gaps, which are both slowing down engineering as well as continuously being taken advantage of by hackers. 

    Cider Security’s platform provides a unified view of the entire engineering ecosystem, providing Security teams with an in-depth understanding and comprehensive view of the technologies, systems, and processes unique to every engineering environment. Security teams are provided a highly tailored set of controls and solutions to optimize security and achieve full resilience across the entire CI/CD pipeline – all the way from code to deployment. Designed to eliminate the friction between Security teams and Engineering groups, Cider Security allows for AppSec programs to be implemented within minutes, democratizing security and allowing AppSec to become a commodity, consumable by organizations from all verticals, sizes, and maturity levels. 

    “My co-founder Daniel and I endured many of the same challenges that security engineers face today, so we set out to build a new approach,” said Guy Flechter, CEO and co-founder of Cider Security. “By removing the barriers to implementing protection – in essence, democratizing security for AppSec teams – we are changing processes that many felt were set in stone. The level of excitement from users completely exceeded our expectations and we can’t wait to change how Security and Engineering teams from companies everywhere operate.” 

    The funding will be used to expand R&D operations in Israel and open new offices globally to support growing demand. Already in use with dozens of global companies, the company also boasts security leaders from Atlassian, Databricks, Netflix, Rapid7, Built Technologies, Lemonade, Rapyd, and others as part of their advisory board and investors. 

    “The demand in the market for Cider Security is massive,” said John Curtius, Partner at Tiger Global Management. “The methods that companies are using are not keeping pace with the threat landscape, creating serious vulnerabilities that impact businesses globally, and Cider Security is poised to become the industry standard for CI/CD security. Even at such an early stage, they have reached impressive milestones and received incredible feedback from the market. We are looking forward to starting the journey with them.”   

    “As the very first AppSec Operating System, Cider Security is well-positioned to become the leading DevSecOps solution in the market,” said Arik Kleinstein, Glilot Founding Managing Partner. “The solution has made a great deal of impact for its customers in a short amount of time, providing a novel approach to application security that takes the realities of development into account.” 

    About Cider Security

    Cider Security is a first-of-its-kind AppSec Operating System that provides Security and Engineering teams a single, consistent method to orchestrate and implement end-to-end CI/CD security through a single, unified platform. The company takes a holistic approach to the security of the engineering processes and systems, from code to deployment. It establishes a comprehensive Technical DNA of the engineering environment, giving Security teams the transparency and visibility needed to optimize AppSec and achieve full resilience. Founded in late 2020 by cybersecurity industry veterans, Guy Flechter and Daniel Krivelevich, Cider Security’s mission is to solve the most commonly encountered challenges CISOs and security engineers face today. For more information, visit www.cidersecurity.io/.  

  • Zoho Takes on Current Low-Code Market Gaps with New Creator Platform to Empower Businesses to Easily Build, Deploy, Manage, and Analyze Custom Solutions

    Bringing in the company’s 15 years of expertise in low code, the new unified development platform empowers both IT teams and business users to build sophisticated, modern, and compliant solutions, for a low-code experience that is secure, easy to use, and custom-fit to solve business challenges

    Austin, TX, March 3, 2022 — Today, Zoho Corporation, a leading global technology company, announced the latest version of its low-code offering, Zoho Creator Platform, an all-in-one solution that bridges the gap between business users and IT teams by providing a low-code solution-building experience regardless of technical know-how. Organizations currently face soaring demand for new business software, but existing low-code platforms for business users only facilitate basic app building, lacking the sophistication needed to develop scalable, enterprise-ready end-to-end tools. Existing solutions in the market designed specifically for business users facilitate only basic app building, lacking the complexity needed to develop end-to-end tools, which allow organizations to scale and ensure centralized governance.

    Addressing the needs of both business users and IT teams, Zoho Creator Platform supports all levels to build, manage, integrate, and analyze for a complete low-code experience, enabling 10X faster deployment than any other solution on the market. Democratizing access to low-code development tools allows IT and business users to work in tandem to create and deploy apps that are highly customized, while minimizing common interoperability, permissions, and governance challenges.

    “Currently there isn’t a low-code solution on the market that allows both business users and IT to truly build end-to-end business solutions,” said Raju Vegesna, Chief Evangelist, Zoho Corporation. “With this update, Zoho’s Creator Platform combines application development, integrations, process automation, business intelligence and analytics into a single platform while simultaneously enabling IT teams to effortlessly manage security, compliance, and governance challenges. Organizations can now leverage a unified solution for all of their low-code needs, extending the ability to innovate to every employee.”

    The Zoho Creator Platform integrates digital data and processes to facilitate the creation of truly agile solutions for business users and IT teams alike. Business developers can now easily build scalable low-code solutions which include apps, integrations, analytics, and process automation without heavy dependency on IT teams or time-consuming training. For IT stakeholders, the Platform now provides deeper controls around governance and management, without compromising automation, data-driven insights, customization, and the ability to affect revenue and growth. Together, business users and IT can quickly deploy secure, dynamic solutions built to auto-scale, so that organizations can focus on solving business problems and pursue new opportunities.

    “We needed a complete solution to resolve specific operational difficulties, including a lack of streamlined communication and an inability to oversee employees effectively. The Zoho Creator Platform allowed us to build new contextual tools that unify disjointed communication channels, automate processes, and seamlessly integrate into our existing system,” said Gaurav Kakkar, System Process Manager at Emirates Logistics. “Additionally, the new Platform has given specific administrators greater flexibility in implementing new processes through the sandbox and demo user options to keep our data secure while providing important business insights. Together, we’re able to better support employees to be more productive, enabling them to collaborate and spot opportunities to better serve themselves and customers.”

    “With this version of Creator, Zoho is shifting its low-code emphasis from applications to business solutions,” said Jason Bloomberg, President of Intellyx, an industry research firm. “Creator helps business stakeholders and IT personnel collaborate to combine applications, business intelligence and analytics, and process automation into end-to-end business solutions. Creator is simple enough for nontechnical staff while also powerful enough to address complex workflow scenarios in a secure, scalable environment.”

    Key areas of innovation in the new Creator Platform include:

    Expand App Building to Solution Building

    Unified Solution Builder – Create, integrate, analyze, and manage custom business solutions at scale from a single dashboard. Seamlessly switch between different elements, with deep interoperability between capabilities, and in-built guardrails for IT teams to drive enterprise-wide citizen development programs.

    Artificial Intelligence (AI) – Zoho’s intelligent AI assistant (Zia) now enables developers to import data from anywhere, cleanse and transform with one click, build data models, and automatically detect data relationships via Smart Import. AI tasks such as predictive analytics, keyword extraction, sentiment analysis, OCR, and object detection are built into the drag-and-drop user interface for easy deployment.

    Process Blueprinting – This intuitive drag-and-drop builder graphically constructs an online replica of a business process by specifying each step, assigning responsibilities across stakeholders, and automating actions based on pre-set conditions. Users can now identify bottlenecks and have clarity to facilitate scalability for evolving business needs.

    Enhanced Serverless Functions – Developers can now write, store, and execute reusable code blocks in Zoho Creator Platform using Deluge, Java, or Node.js. These functions encourage IT and business teams to work together to build scalable and easily maintainable enterprise-ready apps faster.

    Build a Connected Ecosystem of Solutions for a Seamless Experience

    Unified Data Modeling (UDM) – Unchecked data points, varied data formats, and evolving app landscapes add layers of difficult-to-solve complexities to data integration, resulting in sub-optimal business results. Universal cloud modeling is now included to help developers establish secure data transfer by automating data integration protocols with unified data architecture and over 600 plug-and-play connectors to make data integration easier for users.

    Integration Status Dashboard – Users have complete visibility on how well each integration operates with the new Integration Status Dashboard. Status Dashboard provides key findings on recent executions, success and failure stats, and top connections facilitating early error detection and resolution to enable organizations to discover errors and resolve them quicker.

    Embedded BI and Analytics Engine – An industry-first, full-fledged business intelligence and analytics engine is now included in the Zoho Creator Platform, enabling users to derive business insights from the data residing in their applications without worrying about bringing another subscription into the fold. High-end BI functionalities like predictive analytics, data alerts, what-if analysis, data blending, and conversational analytics are all now supported on the low-code platform.

    Increased Control for IT with End-to-End ADLM

    Environments – Developers can now launch solutions in different environments of choice—development, staging (testing), or production—with a single click based on the readiness of the solution. This allows users to add features continuously or make changes without disturbing the existing app in production. The environments also support role-based access to help business developers simulate user-specific experience validation.

    Centralized Governance – To help IT manage low-code development, features such as granular role-based access controls, comprehensive audit trails and backup options, application IDE, dashboards to view and manage users, billing dashboard, personalization options such as localization, branding customization, and more, are now available in the low-code platform.

    Integrated Communication and Collaboration Aid – Often, business developers get stuck in the build phase with minor obstacles, especially when new to the platform. In order to enhance communication and collaboration, integrated communication enables messaging, sending files, sharing screens, and the ability to make audio and video calls.

    Zoho Creator Platform Pricing 

    Pricing starts at $25 USD per employee, with a 15-day trial available. For comprehensive pricing information, please visit: https://www.zoho.com/creator/pricing.html

    Zoho Privacy Pledge

    Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products. More than 75 million users around the world, across hundreds of thousands of companies, rely on Zoho everyday to run their businesses, including Zoho itself. For more information, please visit: https://www.zoho.com/privacy-commitment.html

    About Zoho

    With 50+ apps in nearly every major business category, including sales, marketing, customer support, accounting and back-office operations, and an array of productivity and collaboration tools, Zoho Corporation is one of the world’s most prolific technology companies.

    Zoho is privately held and profitable with more than 10,000 employees. Zoho is headquartered in Austin, Texas, with international headquarters in Chennai, India. Additional offices are in the United States, India, Japan, China, Canada, Singapore, Mexico, Australia, the Netherlands, Brazil, Saudi Arabia, and the United Arab Emirates. For more information, please visit: www.zoho.com/