staging-devopsy.kinsta.cloud

Author: Veronica Haggar

  • OpenLegacy Sees Strong Momentum in Global Banking Sector

    • Instantly transforming monolithic legacy applications into cloud-native building blocks
    • Customers include MUFG Union Bank, Citigroup’s Citibanamex, Banca Popolare di Sondrio, Banorte, Bank Hapoalim, Bank Leumi and Security Bank to name a few, with tens of Fortune 500 banks to soon be announced

    Princeton, NJ, May 18, 2021 — OpenLegacy, which instantly transforms monolithic legacy applications into cloud-native building blocks, has announced significant momentum in the global banking sector. Financial institutions including Citibanamex, Banca Popolare di Sondrio, Banorte, Bank Hapoalim, Bank Leumi and Security Bank are using OpenLegacy to digitally transform legacy systems and step into a new era of innovation.

    “Our world-class roster of global banks and financial institutions demonstrates the hunger for a new approach to legacy integration,” said OpenLegacy Co-Founder and CEO Romi Stein. “Monolithic systems like mainframes weren’t built to support digital innovation, but with OpenLegacy, generating microservice-ready APIs from core applications becomes a non-issue. Banks finally have the agility to embrace new trends and meet even the most rapidly evolving customer needs.”

    OpenLegacy enables enterprises to create composable, high-level system APIs directly from mainframes and core financial systems such as FIS, Fiserv, Hogan, Finastra, Alnova, Midas, FLEXCUBE and Temenos. The platform enables the significantly faster development of digital services on top of the standard enterprise service bus (ESB), while increasing performance and lowering complexity and maintenance costs. OpenLegacy automatically generates APIs from legacy tech, opening up opportunities for digital innovation in mobile experience, end-to-end digital accounts, fintech partnerships and open banking initiatives.

    “Like many of our global peers in the financial services space, Banca Popolare di Sondrio is on a journey to strengthen our relationship with our customers also on-line,” said Milo Gusmeroli, CIO of Banca Popolare di Sondrio. “Doing so requires that we bring the same agility to our monolithic backend that we do to digital development. OpenLegacy has been a critical part of that journey, enabling us to harness the power of our mainframe to deliver a constant stream of innovation – from our mobile and digital solutions.”

    To learn more about OpenLegacy’s initiatives with banks, click here.

    About OpenLegacy

    OpenLegacy’s Digital-Driven Integration enables organizations with legacy systems to release new digital services faster and more efficiently than ever before. It connects directly to even the most complex legacy systems, bypassing the need for extra layers of technology. It then automatically generates APIs in minutes, rapidly integrating those assets into new and exciting innovations. Finally, it deploys them as standard microservices or serverless functions, giving organizations speed and flexibility while drastically cutting costs and resources. With OpenLegacy, industry-leading companies release new apps, features, and updates in days instead of months, enabling them to truly become digital to the core. Learn why leading companies choose OpenLegacy at openlegacy.com, and follow us on Twitter or LinkedIn.

    THE FACTS

    • Website: OpenLegacy

    • Year Founded: 2013

    • Headquarters: Princeton, New Jersey

    • Total Funding Raised: $61M (Series C)

    • Co-Founders: Romi Stein CEO & Co-Founder | Roi Mor Chief Technology Officer & Co-Founder

    • Number of Employees: Approx. 200

    • Customer Verticals: Agriculture, Automotive, Finance, Government, Healthcare, Insurance, Manufacturing, Retail, Services, Telecom

    • Capabilities: Legacy system integration, API Integration, microservice-based APIs, digital transformation, serverless functions

  • Leading Cyber Insurance Provider, Coalition, Launches Free Risk Management Platform to Help Organizations Combat Ransomware and Cyber Risk

    Coalition Control is a risk management platform that offers automated security scanning & continuous monitoring of vulnerabilities for organizations of all sizes

    San Francisco, CA, May 18, 2021 — Coalition, the leading provider of cyber insurance and security, announced today the launch of Coalition Control, an integrated platform for controlling risk with free attack surface monitoring and cyber risk assessment for organizations of all sizes. Coalition Control integrates the insurance, technology, and services offered by Coalition and its partners into a unified digital experience providing access to enterprise-grade security and risk management solutions to help organizations combat ransomware, data breaches, and other cyber losses.

    Included in Coalition Control is free attack surface monitoring, Coalition’s proprietary technology which identifies the public attack surface of any organization, scans it for vulnerabilities, provides recommendations for remediation, and monitors it for changes and new risks. Sign up for a free account at https://control.coalitioninc.com.

    Additional features of Coalition Control include:

    Risk Ranking & Security Performance Management
    Powered by Coalition’s proprietary claims data, technology, and public information, Control offers organizations a risk ranking compared to others in their industry or peer group. Risk rankings provide executives, IT, and security professionals with a quantitative, risk-based summary of their overall cybersecurity posture together with recommendations to drive actions that measurably reduce cyber risk. Coalition Control continuously monitors and measures an organization’s risk over time as new vulnerabilities are discovered and remediated.

    Risk Assessment

    The Coalition Risk Assessment (CRA) is a comprehensive report on the risk profile of an organization and its security rating. It is downloadable on demand inside Coalition Control, and provides dynamic, objective measurements of an organization’s cybersecurity posture. Uniquely, the CRA also provides insurance benchmarking including the likelihood your organization will file a claim relative to peers, the expected probability of loss of various loss types (e.g., ransomware, social engineering, and data breach), and data on how much cyber insurance peer organizations purchase.

    Third-Party Risk Management

    Coalition Control allows you to monitor your supply chain and key partners using the same data sources and methods used to monitor the security of your own organization. Free Coalition Control accounts include scanning and monitoring of one third party organization.

    Invite Colleagues

    With the launch of Control, Coalition aims to democratize access to cybersecurity tools for all organizations. Any user from an organization can invite others within their organization to join them inside Coalition Control. The ‘Invite’ button is a global feature found in the navigation bar across all pages within the platform, and allows users from security teams to the C-suite to have access to a single source of truth for their organization’s attack surface and vulnerability management.

    “No organization can afford to ignore increasingly destructive ransomware and cyber attacks, yet cybersecurity has never been more expensive,” said Joshua Motta, CEO and co-founder of Coalition. “Coalition Control is designed to address what is now the single most pervasive risk facing individuals and businesses – cyber risk. Easy to set up, easier to use, and it’s available for free to all who sign up.”

    Coalition is also expanding its technology partner ecosystem to include offerings from leading cybersecurity providers in identity and access management (IAM), endpoint detection and response (EDR), governance, risk, and compliance (GRC) training, and security training, as well as applications and tools to defend against, manage, and respond to threats efficiently and quickly.

    To learn more about Coalition Control, visit https://control.coalitioninc.com.

    About Coalition

    Coalition is the leading provider of cyber insurance and security, combining comprehensive insurance and proactive cybersecurity tools to help businesses manage and mitigate cyber risk. Backed by leading global insurers Swiss Re Corporate Solutions, Arch Insurance, Lloyd’s of London, and Argo Group, Coalition provides companies with up to USD $15 million of cyber and technology insurance coverage in all 50 states and the District of Columbia, as well as CAD $20M of coverage across 9 provinces and 3 territories in Canada. Coalition’s cyber risk management platform provides automated security alerts, threat intelligence, expert guidance, and cybersecurity tools to help businesses remain resilient in the face of cyber attacks. Headquartered in San Francisco, Coalition’s team is global with employees based across the United States, Canada, the United Kingdom, Switzerland, and Portugal.

  • Illusive Recognized as a Microsoft Security 20/20 Partner Awards Winner for Identity Trailblazer, Finalist in Security Trailblazer

    New York, NY and Tel Aviv, Israel, May 18, 2021 — Illusive, the leader in Active Defense, today announced it has been named a winner for the Microsoft Security 20/20 Identity Trailblazer award and a finalist in for the Security Trailblazer award. The company was honored among a global field of industry leaders for demonstrating excellence in innovation, integration, and customer implementation with Microsoft technology.

    “Protecting privileged identities is one of the most important and challenging elements of an organization’s security, which is why we aim to take a unique approach to helping solve this problem,” said Ofer Israeli, Founder and CEO of Illusive. “However these problems are not solved in silos. We are incredibly proud of our collaborative journey with Microsoft, we are grateful to our customers, and also salute the other vendors nominated in these categories.”

    The Identity Trailblazer is focused on partners who drive major identity-related initiatives and educate the market on how to protect identities. The award categories and finalists were selected by a cross-functional group within Microsoft for their excellence in innovation, integration, and customer implementation.

    “The pandemic has forever changed our perspective on the world, the role of technology, and how we work, learn, and live,” said Rani Lofstrom, Senior Product Marketing Manager, Microsoft Global Security Partnerships. “In recognition of our new reality, the theme for the Microsoft Security 20/20 Awards this year is ‘Perspective—Through the Looking Glass.’ The awards ceremony this year will honor our security partners who have gone above and beyond during an unprecedented time of change to support, secure, and protect remote workers everywhere.”

    The Microsoft Intelligent Security Association (MISA) was established to help further the security ecosystem, fostering an environment where solution providers can collaborate to create a future that’s safer for people and organizations alike. This year, the industry veterans in MISA voted to select the winners of the Microsoft Security 20/20 awards, providing an opportunity for colleagues to honor their peers for delivering exceptional work to our shared customers.

    Just last month, Illusive announced Active Defense for Microsoft Defender for Endpoint, one of the first complete market offerings that combines active defense countermeasures, anomaly-based detection, and automated response in a single user interface that aligns with both the MITRE ATT&CK and MITRE SHIELD Active Defense frameworks.

    For more information on the Microsoft Security 20/20 Partner Award, please visit https://illusive.com/resources/illusive-wins-identity-trailblazer-prize-at-the-microsoft-security-20-20-awards/

    About Illusive
    Illusive prevents attackers from accessing critical assets and detects the lateral movement that enables today’s most dangerous ransomware and nation-state attacks. Despite significant investments, it’s still difficult to see and stop attackers moving inside your environment. The Illusive Active Defense Suite identifies and removes the vulnerable connections and credentials that allow attackers to move undetected, and then replaces them with deceptive versions that fool attackers into revealing their presence upon engagement. Illusive’s agentless approach captures deterministic proof of in-progress attacks and provides actionable forensics to empower a quick and effective response.

    Illusive was founded by nation-state attackers who developed a solution to beat attackers. We help Fortune 100 companies protect their crown jewels, including the largest global financials and pharmaceuticals. Illusive has participated in over 130 red team exercises and never lost one!

    For more information, visit www.illusive.com, contact us at info@illusive.com or follow on LinkedIn, @illusivenw on Twitter and Facebook.

  • Styra Raises $40 Million in Series B Funding to Drive Access, Security and Compliance in Cloud-Native Applications

    Led by Battery Ventures, the funding cements Styra, the creators of OPA, as the leader in cloud-native authorization

    Redwood City, CA, May 18, 2021 — Styra, Inc., the founder of Open Policy Agent (OPA) and leader in cloud-native authorization, has raised a $40 million Series B funding round to continue driving the reinvention of policy and authorization for cloud-native applications. The round was led by Battery Ventures with participation from previous investors, A. Capital, Unusual Ventures, and Accel, as well as new investors at Capital One Ventures and Citi Ventures. With this funding, Dharmesh Thakker, General Partner at Battery Ventures, will be joining the Styra board. The round further solidifies its market leadership and provides capital to accelerate its founders’ vision—to create the standard for authorization—which started with OPA.

    OPA, initially proven out at scale by the likes of Netflix, Capital One, Atlassian, Pinterest and others, has now reached the point of over one million downloads per week. Styra has also seen exponential business traction in 2020, achieving 300% customer and commercial growth year-over-year, and 90% headcount increase.

    OPA and Styra Declarative Authorization Service (DAS), the commercial control plane for OPA, address two related but separate inflection points—cloud migration/digital transformation, and the need to rethink authorization. Accelerated by the new requirements for remote work, legacy apps are being migrated to the cloud in earnest and new apps are cloud-native from the start. In both cases that means apps are shifting to a containerized model, are running on Kubernetes and utilize DevOps/CICD processes.

    “Our vision has always been to create the standard for authorization—the control over what a user or service can do—and our OPA project has become just that,” said Bill Mann, CEO of Styra. “It’s exciting for OPA and Styra to be at the forefront of cloud-native, shift left, zero trust, and developer-centric architectures. This funding proves the validity of the authorization market for cloud-native applications and solidifies Styra as the leader in this critical market space.”

    With this funding, Styra will double its current team by the end of 2021, initially in its product management, customer success, open source and go-to-market departments. The team will support enterprise deployments as well as ramp up business development and ecosystem partnerships. Additionally, the company plans to invest in employee career growth, people operations and diversity—ensuring it is bringing both cultural diversity and broad industry experience into the organization.

    From a product perspective, the company plans to utilize this funding to enhance Styra DAS with new policy-as-code use cases across the cloud-native stack, and expand integrations with key technology partners. Additionally, Styra will expand its open source and developer advocacy team, ensuring OPA users find success at every stage of their journey. Styra will also continue to foster the community culture of collaboration and innovation that has made OPA so successful.

    Intersection of digital transformation and cloud-native authorization

    Digital transformation has become a top priority for enterprises in the wake of a global pandemic. The unprecedented demand for remote work requires a shift to cloud-native application development, in order to provide better uptime, reliability and efficiency. However, new cloud-native architectures and an “everything-as-code” landscape means that authorization is more critical than ever before. This includes what parts of the app can talk to each other, who/what can access certain components of the app, what can exist in production and more. Given the possibilities are far more complex than on legacy monolithic applications, a new method for performing authorization is required.

    “We are extremely impressed with the Styra team and the progress they’ve made in this dynamic market to date,” said Battery’s Thakker. “Everyone who is moving to the cloud, and adopting containerized applications, needs Styra for authorization—and in the light of today’s new, remote-first work environment, every enterprise is now moving to the cloud.”

    Added René Bonvanie, a former Palo Alto Networks executive who is now an executive in residence at Battery and was involved in the deal: “In 11 years working at one of the largest public cybersecurity companies, I saw no one who had managed to solve authorization for the cloud-first world. Styra is filling that void, and we are very excited about what’s ahead.”

    OPA has been proven in production with over 75 million downloads—which increased nearly 600% in 2020 alone—and is deployed in some of the largest cloud-native environments in the world. On top of this, the Cloud Native Computing Foundation announced that OPA met the criteria to achieve graduated status in February 2021, making it the only graduated project to solve for authorization. Styra DAS enables enterprises to deploy, monitor and manage OPA at scale. The combination of OPA and Styra DAS ensures that authorization and access in today’s complex environments can be controlled and audited across teams, clusters and clouds.

    Learn more about securing your cloud-native solutions with Styra.

    About Styra

    Styra, the founders of Open Policy Agent (OPA), provides open source and commercial solutions that enable enterprises to define, enforce and monitor authorization policy across their cloud-native applications, as well as the infrastructure they run on. Styra policy-as-code solutions let developers, DevOps and security teams mitigate risks, reduce human error and accelerate application development. Learn more at styra.com.

  • ThycoticCentrify Announces New Solution to Govern and Manage Privileged Access to Cloud Platforms

    Santa Clara, CA and Washington DC, May 18, 2021 ― ThycoticCentrify, a leading provider of cloud identity security solutions formed by the merger of privileged access management (PAM) leaders Thycotic and Centrify, today unveiled its cloud provider solution to centrally manage AWS billing accounts, identity and access management (IAM) accounts, and AWS EC2 instances in real-time.

    Organizations are rapidly moving in-house applications to the cloud, often taking a “lift and shift” approach to migrate virtual machines (VMs) and applications to their preferred cloud provider. In doing so, they often create several different AWS Accounts for each application project or department where each AWS Account has its own root/billing account, IAM user accounts and service accounts, as well as those of the virtual machines (VMs) created to support the application. It’s difficult to manage AWS root/billing account credentials since any changes must be assisted by a human, and AWS best practice is to configure multi-factor authentication (MFA) for the account driven by AWS service enforcement. While automation tooling may integrate new AWS EC2 instances into a PAM solution, operations, staff, and auditors need a way to ensure and validate that all hosted VMs are accounted for and properly secured.

    ThycoticCentrify’s cloud provider solution for AWS addresses these challenges by extending a set of existing PAM capabilities to automate continuous discovery of all AWS EC2 instances, providing full visibility of instances even in elastic auto-scaling groups. AWS root/billing accounts are vaulted for emergency access only, and interactive access to AWS Accounts via the AWS Management Console, AWS CLI, SDKs, and APIs is strictly controlled. AWS IAM accounts and associated Access Keys are eliminated or vaulted to reduce the attack surface, with SAML-based federated single sign-on providing a more secure and lower-maintenance alternative. Continuous EC2 discovery and post-discovery automations ensure complete and accurate visibility and that EC2 instances and their privileged accounts are immediately secured and brought under centralized management.

    “The cloud is a game changer when it comes to scalability and availability, but it has also changed the game for cyber-attackers looking to leverage new vulnerabilities created by disparate controls and resulting identity management challenges,” said David McNeely, chief technology officer at ThycoticCentrify. “Our cloud provider solution for AWS provides real-time visibility into cloud workloads as they are added and removed, automating privileged password and identity management that ensures administrative and access controls are enforced while reducing complexity and risk.”

    The foundation of ThycoticCentrify’s cloud provider solution is a cloud-native “hub-and-spoke” architecture centered around the Centrify Platform and lightweight Centrify Gateway Connectors that enroll cloud workloads into the Centrify Platform. The solution can also auto-deploy Centrify Clients on discovered Windows and Linux instances for fine-grained access control, auditing, and visual session recording, as well as enabling password-less login leveraging ephemeral certificates from the Centrify Platform via “Use My Account.”

    ThycoticCentrify’s cloud provider solution is initially available for AWS, and will soon be extended to Microsoft Azure and other cloud provider platforms. For more information about ThycoticCentrify’s cloud provider solution for AWS visit https://www.centrify.com/resources/solution-briefs/aws/.

    About ThycoticCentrify
    ThycoticCentrify is a leading cloud identity security vendor, enabling digital transformation at scale. ThycoticCentrify’s industry-leading privileged access management (PAM) solutions reduce risk, complexity, and cost while securing organizations’ data, devices, and code across cloud, on-premises, and hybrid environments. ThycoticCentrify is trusted by over 14,000 leading organizations around the globe including over half of the Fortune 100, and customers include the world’s largest financial institutions, intelligence agencies, and critical infrastructure companies.

    ©Thycotic Software, LLC and Centrify Corporation 2021. ®Centrify and ®Thycotic are registered trademarks of Centrify Corporation and Thycotic Software, LLC, respectively, in the United States and other countries.

  • Businesses Are Prioritizing Composable ERP Strategy as Pandemic Accelerates Cloud Migration

    Boomi Global ERP Report Finds Organizations Achieve Agility and Growth Through Modernizing Legacy Applications

    Chesterbrook, PA, May 18, 2021 – Boomi™, a leading provider of cloud-based integration platform as a service (iPaaS), today announced the findings from a new global survey revealing that nine out of 10 organizations worldwide – a staggering 94% – are embracing a Composable Enterprise Resource Planning (ERP) strategy to overcome the limitations of legacy applications and modernize their businesses to gain a competitive market advantage.

    Commissioned with Coleman Parks, the independent survey of 1,675 CTOs and enterprise architects shows companies are keenly aware that their legacy ERP systems, the backbone of every organization, are struggling to keep pace with business today. This explains the trend toward the modern strategy of Composable ERP, which gives companies a flexible platform to bridge the gap between legacy and modern applications.

    Yet despite the flexibility Composable ERP provides, integrating all of those applications to work collaboratively and share data is still a monumental challenge. As legacy integration solutions require expensive, time-consuming, custom development and coding, optimization and automation are high priorities for IT teams today. This is evidenced by 76% of survey respondents investing in standardization and consolidation of applications, and 72% modernizing applications and migrating to the cloud.

    “The typical enterprise has, on average, 850 applications, of which only 30% are connected,” said Chris McNabb, CEO of Boomi. “The biggest challenge every business faces today is unifying their increasingly fragmented digital ecosystem so they can create the integrated experiences expected by customers, employees, and partners. Organizations that remove friction through fast, intelligent data discovery and cataloging, pervasive connectivity, process integration, and automating human workflows are the ones best positioned to thrive as we move beyond the pandemic.”

    Leading analyst firm Gartner suggests a focus on integration is critical. “ERP vendors will have to provide or partner with integration platforms in order to meet customers’ demands for increased integration capabilities,” Gartner wrote.[1] “This is because ERP customers will empower business users to bring together applications and data to build business capabilities for their enterprise. Customers will engage multiple vendors, clouds and services to compose capabilities.”

    Boomi’s recent findings suggest businesses see the vast potential of Composable ERP but are struggling to implement an integration strategy. In the survey, 51% of respondents said providing the best user experience possible was the motivation behind adopting integration technology. Yet 47% indicated their current integration solutions struggle to meet their challenges. Forty-two percent say there is a high cost to maintaining these solutions, with 38% finding that they can’t cope with their complex hybrid technology environment.

    Other key survey findings include:

    • 97% say they are adopting a Hybrid Integration Platform (HIP) strategy to gain the flexibility to integrate applications and data wherever needed.
    • Combined, 95% say improving business efficiency (33%), increasing IT agility (32%), and driving business growth (30%) were the top benefits cited of moving their ERP suites to the cloud.
    • Organizations are now committed to migrating ERP suites to the cloud, and 58% predict that their ERP system will no longer be fully on premises by 2022.
    • The majority of respondents agreed that the main obstacles hindering modernization are budget constraints (38%), complex hybrid IT environments (37%), and process roadblocks related to legacy technology (35%).

    “After a year of coping with incredible change, businesses recognize that modernization is critical to survival,” McNabb added. “As organizations ramp up efforts with Composable ERP, open iPaaS platforms are essential to making it a success.”

    Additional Resources

    About Boomi

    Boomi instantly connects everyone to everything with our cloud-native, unified, open, and intelligent platform. Boomi’s integration platform as a service (iPaaS) is trusted by more than 15,000 customers globally for its speed, ease-of-use, and lower total cost of ownership. As the pioneer at fueling intelligent use of data, Boomi’s vision is to make it quick and easy for customers and partners to discover, manage, and orchestrate data, while you connect applications, processes, and people for better, faster outcomes.

    For more information, visit http://www.boomi.com.

    © 2021 Boomi Inc. Dell, Dell Technologies, Boomi, the ‘B’ logo, Atom, Boomiverse, AtomSphere, Molecule, and Dell Boomi are trademarks of Dell Inc., or its subsidiaries. All rights reserved. Other names or marks may be the trademarks of their respective owners.

  • Perforce Acquires 21 Labs, an AI-Based Scriptless Mobile Testing Provider

    Acquisition Allows Perforce to Offer a Comprehensive, Intelligent Test Automation Solution to Help Businesses Deliver Faster Results

    Minneapolis, MN, May 17, 2021 – Perforce Software, (“Perforce”), a provider of solutions to enterprise teams requiring productivity, visibility, and scale along the development lifecycle, backed by Clearlake Capital Group, L.P. (together with its affiliates, “Clearlake”) and Francisco Partners, announced today that it has acquired 21 Labs, an AI-based mobile testing provider that helps businesses deliver quality software faster.

    As Perforce’s second scriptless testing acquisition, 21 Labs will further strengthen the company’s portfolio of automated testing solutions. Following the recently announced Perfecto Scriptless solution for no-code web testing and the addition of virtual devices, the Perfecto platform now offers the only complete set of digital tools for mobile and web environments available today.

    “In today’s crowded testing market, enterprises are looking for a comprehensive, reliable solution that addresses the testing lifecycle across all digital channels, from creation, to execution, to analysis. Together with 21 Labs, we’re able to do just that – being the first to provide organizations with a complete continuous testing solution for mobile and web that quickly delivers combined, AI-driven insights to improve application quality and directly impact the success of their businesses,” said Mark Ties, CEO and President, Perforce. “21 Labs further advances our mission to help customers deliver innovation at speed and at scale.”

    As the industry continues to shift-left, enterprises struggle with automating QA and speeding the feedback loop from development and testing to ensure a quality user experience. Challenged by the unique skill sets needed to implement test automation throughout the software delivery lifecycle, businesses require a seamless, user-friendly platform that will help streamline testing so they can focus their time and energy on innovation.

    “Together, Perforce’s portfolio of intelligent test automation solutions and 21 Labs’ AI-based technology will help customers solve their hardest DevOps challenges. The skill set gap, integration complexity, and lengthy test creation and maintenance cycles are a sore spot for enterprises. These are further amplified in mobile due to the different development frameworks and the fragmentation of devices and operating systems. Companies can now achieve continuous testing in weeks vs. months or years through a self-learning and framework-agnostic intelligent test creation and maintenance platform,” said Shani Shoham, CEO and Founder, 21 Labs. “By joining forces with Perforce, we will be able to see out our vision of leveraging data to make QA more autonomous and close the feedback loop between development and production.”

    “Apps are often the face of a business and an innovative, always-improving experience is vital to customer engagement,” said Tim Russell, Chief Product Officer, Perforce. “21 Labs’ technology expands our offering to ensure enterprises are able to find and fix errors so they can deliver innovative quality experiences, faster.”

    21 Labs’ framework-agnostic, self-learning, and auto-maintenance test automation engine leverages AI and visual analysis to help customers quickly author mobile tests in a code-free environment on real or virtual devices. Today, the solution is integrated with the Perfecto Intelligent Test Automation platform, allowing users to execute their tests and analyze results with confidence.

    To learn more about the Perfecto Platform for Web and Mobile Testing, click here: http://www.perfecto.io/.

    Lincoln International served as the exclusive financial advisor to Perforce on this transaction.

    About 21 Labs
    21 Labs is a DevOps platform that uses production analytics to enable autonomous testing and release with confidence, backed by data. The self-learning, auto-maintenance test automation platform reduces manual and automated QA efforts by 90% and helps organizations truly leverage CI/CD in weeks vs. years. 21 Labs is a framework agnostic SaaS platform, integrated into its customers’ stack, requiring no lengthy setup processes.

    About Perforce
    Perforce powers innovation at unrivaled scale. Perforce solutions future-proof competitive advantage by driving quality, security, compliance, collaboration, and speed – across the technology lifecycle. We bring deep domain and vertical expertise to every customer, so nothing stands in the way of success. Privately held and funded by Clearlake Capital and Francisco Partners, our global footprint spans more than 80 countries and includes over 75% of the Fortune 100. Perforce is trusted by the world’s leading brands to deliver solutions to even the toughest challenges. Accelerate technology delivery, with no shortcuts. Get the Power of Perforce.

    About Clearlake Capital
    Clearlake Capital Group, L.P. is a leading investment firm founded in 2006 operating integrated businesses across private equity, credit and other related strategies. With a sector-focused approach, the firm seeks to partner with world-class management teams by providing patient, long-term capital to dynamic businesses that can benefit from Clearlake’s operational improvement approach, O.P.S.® The firm’s core target sectors are technology, industrials and consumer. Clearlake currently has approximately $35 billion of assets under management and its senior investment principals have led or co-led over 300 investments. The firm has offices in Santa Monica and Dallas. More information is available at www.clearlake.com and on Twitter @ClearlakeCap.

    About Francisco Partners
    Francisco Partners is a leading global investment firm that specializes in partnering with technology and technology-enabled businesses. Since its launch over 20 years ago, Francisco Partners has invested in more than 300 technology companies, making it one of the most active and longstanding investors in the technology industry. With more than $25 billion in assets under management, the firm invests in opportunities where its deep sectoral knowledge and operational expertise can help companies realize their full potential. For more information on Francisco Partners, please visit www.franciscopartners.com.

  • DAOPS Meetup 2021: Software Engineering, DevOps and DevSecOps

    DAOPS Meetup 2021: Software Engineering, DevOps and DevSecOps

    DAOPS Foundation—a non-profit organization committed to accelerating global digital transformation through technical standardization—is hosting the first ever DAOPS Meetup on May 18. The virtual meetup will bring together DevOps leaders from Sonatype, DevOps Institute, TARS Foundation and DAOPS Foundation to discuss the latest in software engineering and the latest DAOPS developments.

    Here are the four sessions scheduled for the DAOPS Meetup.

    ASEM, Next Generation Software Engineering Infrastructure

    Software is the core of digital transformation. In the digital era, the way we produce software also needs to be digitized. Forest Jing, chief evangelist at DAOPS Foundation, explains how they plan to help global enterprises build a high-performance, technical organization based on Lean, Agile, CI/CD, SRE, DevSecOps, Cloud Native, etc., by developing the next generation software engineering infrastructure named ASEM.

    Best DevOps Practice with TARS

    TARS is a high-performance RPC framework based on name service and Tars protocol, also integrated administration platform, and implemented hosting-service via flexible schedule. During this session, Mark Shan, chair at Tencent Open Source and TARS Foundation, will share the best DevOps practice using TARS.

    DevOps Hybrid Skills — Upskilling towards EverythingOps

    Upskilling is a human endeavor and a key contributor to personal and career growth. This past year was like no other. As we progress through the “next normal” of this decade, one thing is certain—digital transformation relies on human skills transformation. DevOps has continued to shift left in recent years, becoming more integral to operational processes as manifests in domains such as secure-development-focused DevSecOps, secure-operations-focused SecOPs, artificial intelligence-based AIOps, machine learning-focused ModelOps, and data management-related DataOps. As each of these evolves, its specific required skill set is being fleshed out and internal IT staff have the opportunity to upskill to meet requirements. Join Dheeraj Nayal, global community ambassador at DevOps Institute, to learn all about DevOps upskilling.

    The Rise of Next Generation Software Supply Chain Attacks

    Cameron Townshend, Solution Architect from Sonatype

    The adoption of open source in software development has grown exponentially over the past decade. Yet, the time required for hackers to exploit a newly disclosed open source vulnerability has shrunk by 93.5%. As development teams deliver new innovations, adversaries are also upping their game; something we’ve seen in recent high profile and devastating cyberattacks, such as Dependency Confusion.

    Adversaries have the intent and ability to exploit security vulnerabilities in the software supply chain—and in some cases plant vulnerabilities themselves. They have increased scale through automation and improved breach success through precision targeting. Cameron Townshend, solution architect at Sonatype, urges developers to fight back by doing the same: automating security directly in the DevOps pipeline.

    For more information and to register visit the DAOPS Meetup website.

  • WitFoo Announces Partnership with Ardalyst

    Federal MSSP & VAR Partners with SecOps Platform to Deliver Soc of the Future and Compliance with Evolving Government Cybersecurity Standards

    Dunwoody, GA, May 17, 2021 – WitFoo, the world’s most intelligent SECOPS platform fueled by big data analytics, announced today a partnership with Ardalyst, a digital risk management company, to offer Precinct as a service to its customers. A critical component of Ardalyst’s SOCs of the Future design, Precinct delivers flexible and scalable SIEM/SOAR capabilities for a globally-scalable architecture offering advanced awareness-in-breadth as well as compliance with evolving government cyber standards, including NIST SP 800-53 and 800-171 and Cybersecurity Maturity Model Certification (CMMC) Maturity Levels 2 through 5.

    “WitFoo’s Precinct offers the best combination of flexible deployment options, cost-contained licensing and multi-tenancy support in the SIEM/SOAR space,” said Josh O’Sullivan, CTO and co-founder, Ardalyst. “With Precinct as the foundation of our SOCs of the Future offering, we’re able to not only satisfy the strictest requirements from our customers, but also enable them to do more with less.”

    Ardalyst envisions the SOCs of the Future as a network of integrated operations centers working together towards cyber resiliency and mission assurance. Ardalyst’s design is a comprehensive, hybrid approach to enable multiple operations centers to monitor a multi-tenant/multi-site set of enterprise networks, clouds and deployed locations. The Ardalyst SOCs of the Future offering integrates FireEye, Gigamon and WitFoo solutions to achieve maximum agility, velocity, scalability and effectiveness.

    “Affordable compliance is crucial to doing business in the federal market and companies like Ardalyst are making it easy for customers to meet requirements, while simultaneously enhancing their cybersecurity posture,” said Tim Bradford, CEO of WitFoo. “We’re excited to partner with Ardalyst and aid them in their mission of helping clients protect and expand their competitive edge.”

    Precinct is available for purchase immediately through Ardalyst. For more information on partnering with WitFoo, visit: https://www.witfoo.com/partners/ and for details on pricing, visit: https://www.witfoo.com/pricing/

    About WitFoo

    Built by veterans of the military, law enforcement and cyber security, WitFoo’s mission is to deliver sustainable security. The company’s flagship product, Precinct, is the world’s most intelligent SECOPS platform fueled by big data analytics. By crowdsourcing intelligence from a global community of cybersecurity experts, applying time-tested methodologies from law enforcement and leveraging intelligent data and analytics, Precinct’s Investigative Engine results in a greater than 90% reduction in time and labor spent performing security investigations. The platform produces metrics on risk, tool effectiveness, operational efficiency and security gaps to fuel transformational business conversations. Infinite scalability, cost-contained licensing and flexible deployment options make Precinct an effective and economic solution for any organization looking to improve their security practice. For more information, visit www.witfoo.com

    About Ardalyst

     Ardalyst is a veteran-owned digital risk management company founded in 2013 that provides integrated, mission-tailored, cyber-defendable solutions to support small, mid-size, and enterprise markets. Ardalyst helps clients create and sustain competitive advantage through information technology in a secure, resilient manner. To help customers succeed in their mission, the company provides a full spectrum view of information technology platforms, cyber defense, and business applications.  Ardalyst also strives to educate public and private sector institutions on how to mature their people, processes, and technologies to thrive in a rapidly changing competitive environment. Ardalyst operates a family of affiliated companies that provide services targeted to the federal government, government contractors, commercial organizations, and the Department of Defense.

  • Cisco CEO Addresses World’s Largest Cybersecurity Conference: “Security Must Be Simple, Intelligent and Everywhere”

    San Jose, CA, May 17, 2021 — Cisco, the leader in enterprise security, today unveiled innovations to further its journey to radically simplify and deliver end-to-end security, across users, devices, networks, applications and data. Announcements today improve Extended Detection and Response (XDR) with greater visibility across network, endpoint and cloud. New innovations expand Cisco’s vision for Secure Access Service Edge (SASE) with enhanced threat detection in the cloud and redefine and simplify network security. Cisco continues to simplify customers’ security, network and IT operations – empowering organizations to embark securely on digital transformation.

    The world has shifted towards a more distributed workforce, and with recent global events, hybrid work is here to stay. Users now expect to connect from anywhere and on any device, while security teams have the same complex, piecemeal and time-consuming solutions. It is time to rethink security.

    “Security has to be at the heart of everything in the new world we live in. We believe it needs to be done with a platform approach that is simple, comprehensive and based on intelligence,” said Cisco Chairman and CEO Chuck Robbins, addressing the virtual RSA Conference audience. “There is really no perimeter in the enterprise to defend anymore. We need visibility across endpoints, users and applications as well as securing critical control points with continuous passwordless authentication.”

    Improving Visibility and Simplifying Extended Detection and Response (XDR)

    The erosion of the network perimeter and transition to work-from-anywhere have conspired to expose endpoint devices, users and applications to threats more so than ever before. Organizations continue to struggle with extending visibility and protection to endpoints, with more than 40% globally reporting a major security incident in the last two years, according to the new Cisco Security Outcomes Study: Endpoint Edition. Organizations that do not prioritize integrated solutions were almost twice as likely to have suffered a major security event. In response, Cisco continues to expand its XDR capabilities, integrating multiple security control points and applying analytics and automation to reduce customers’ time to detection and response. Cisco today announced:

    • Industry-leading Vulnerability Management with Kenna Security: Cisco will combine threat and risk-based vulnerability management as part of the SecureX platform with its announcement of intent to acquire Kenna Security. This integration will help customers prioritize vulnerabilities, speed and automate decision making with tailored information, and accelerate response time for cyber readiness.
    • SecureX Device Insights: Customers can quickly consolidate their device inventory from multiple sources within the SecureX platform to provide unsurpassed visibility and context for IT operations (ITOps) and security operations (SecOps) as well as automated threat enrichment and response.
    • Simplified Transition to XDR from EDR: As the only endpoint security solution with a built-in platform, SecureX continues to help customers simplify the move from Endpoint Detection and Response (EDR) to XDR with more than 30 pre-built workflows, 40 turnkey integrations and new orchestration capabilities. In addition, Cisco Secure Client, our single agent across user, cloud and endpoint protection, enables faster XDR while reducing agent fatigue.
    • Expanded Investigation and Quicker Response: Cisco Secure Endpoint’s advanced search technology now bolsters XDR value, offering more than 200 endpoint queries out-of-the-box to get real-time answers to support investigations, threat hunting, and IT Ops use cases such as tracking artifacts about endpoints.

    “Organizations are increasingly looking to adopt end-to-end security architectures to support this new way of working, and we think it’s critical to take a platform approach to simplify security, network, and IT operations as customers embark on digital transformation,” said Gee Rittenhouse, SVP and General Manager, Cisco Secure. “Since it was launched last year at RSA, more than 7,000 customers are using Cisco’s SecureX platform to unlock value from existing security solutions and accelerate their migration to XDR.”

    “SecureX device insights provides an instant view of all the endpoints and devices with details needed to assess compliance and health of all assets in my environment,” said John DePalma, Cybersecurity Engineer, Sentara Healthcare. “SecureX device insights delivers welcome help to gain momentum on our Zero Trust journey at Sentara.”

    Delivering on a SASE Vision with Enhanced Cloud Security

    Today’s distributed and hybrid workforce necessitates delivering protection and performance wherever employees access the internet or cloud applications. Cisco’s SASE architecture integrates multiple security and networking functions into a single, secure connectivity offer. This significantly simplifies security and reduces the cost, time, and resources previously required for deployment, configuration, and integration. Continuing to deliver on its SASE vision, Cisco today announced:

    • Rapid Deployment of Cloud Security across SD-WAN: New integration between Cisco Umbrella and Cisco SD-WAN powered by Meraki extends the SD-WAN fabric to the cloud with the click of a button and includes intelligent path selection to enable customers with secure access and the best user experiences when connecting to cloud applications.
    • Intrusion Prevention System (IPS) in Cloud-Delivered Firewall: Umbrella’s cloud-delivered firewall now includes an additional layer of protection with Snort 3 IPS, backed by Cisco Talos, one of the largest commercial threat intelligence teams in the world.
    • New Packages for Best Protection and Value: Umbrella’s new Secure Internet Gateway (SIG) Advantage package reduces the complexities of purchasing and unifying point solutions by offering a complete set of security capabilities in a single subscription.

    Redefining and Simplifying Network Security

    Constantly changing application environments make network security more complex. Modern continuous integration and continuous delivery (CI/CD) applications necessitate tighter coordination among developers, security, and network teams to ensure application environments and workloads are secure, firewalls are appropriately configured, and policies are integrated. Otherwise, vulnerabilities and misconfigurations in these constantly changing environments leave doors open for potential threat actors. Redefining and simplifying network security, Cisco today announced:

    • Industry-first Integrated Network and Workload Security: Cisco Secure Workload dynamically informs Cisco Secure Firewall of required policy changes and provides comprehensive visibility and control, no matter where applications are located.
    • Upgraded Threat Defense: Secure Firewall Threat Defense 7.0, delivers better efficacy with Snort 3 IPS, the world-leading threat protection platform which defined next generation intrusion prevention systems (NGIPS). Snort is now deployed across 800K+ Cisco devices, and the open-sourced Snort engine has seen over 8M+ downloads with 750K+ active users. It includes the flexibility to create robust policies in dynamic environments where fixed IP addresses don’t exist, and performance gains up to 30% on most appliances.  (Snort 3 is also now featured in Cisco SD-WAN powered by Meraki and Umbrella.) The addition of the SecureX ribbon to Secure Firewall Management Center also further simplifies detection and response.
    • Introducing Cisco Secure Firewall Cloud Native: Purpose-built for Kubernetes environments, Cisco Secure Firewall Cloud Native is developer-friendly, and the most elastic firewall Cisco has ever built.

    “At ePlus we strive to deliver effective, integrated cybersecurity centered on mitigating business risk,” said Lee Waskevich, Vice President of Security at ePlus Technology, Inc. “Cisco is building on a strong portfolio and continues to innovate how they deliver a holistic platform approach focused on reducing complexity, and integrating security across the network, endpoints, users, apps and cloud through SecureX. As a Gold Master Certified Security Partner, ePlus is excited to partner with Cisco and help our customers recognize the advantages SecureX brings to their security operations.”

    To learn more about Cisco’s solutions to simplify security, visit cisco.com/go/security.