Jayesh Ahire
👤 PersonAppearances Over Time
Podcast Appearances
Testing those builds with various tools, having the SaaS tools in place gives them a path towards a better and secure development. Then when you deploy and create the containers, you actually create this infrastructure as code pipelines, the Terraform server.
having the security layer there as well helps you with another gate so all of these gates coming together relatively help you create a secure system overall and the security testing plays a great role when it comes to level between develop and deploy
having the security layer there as well helps you with another gate so all of these gates coming together relatively help you create a secure system overall and the security testing plays a great role when it comes to level between develop and deploy
having the security layer there as well helps you with another gate so all of these gates coming together relatively help you create a secure system overall and the security testing plays a great role when it comes to level between develop and deploy
So before you go and distribute it to production, you actually should run automated security testing, which will catch things like OWASP API top 10s, any of the PCI DSS vulnerabilities, anything that can help you or your organization to meet the compliance standards, as well as make sure you have a better security posture overall.
So before you go and distribute it to production, you actually should run automated security testing, which will catch things like OWASP API top 10s, any of the PCI DSS vulnerabilities, anything that can help you or your organization to meet the compliance standards, as well as make sure you have a better security posture overall.
So before you go and distribute it to production, you actually should run automated security testing, which will catch things like OWASP API top 10s, any of the PCI DSS vulnerabilities, anything that can help you or your organization to meet the compliance standards, as well as make sure you have a better security posture overall.
All of those vulnerabilities should be continuously and automatically running on your staging environment If any of those vulnerabilities are found, we should be able to mitigate them before things go into production. That framework helps us to visualize and propagate it to our customers as well.
All of those vulnerabilities should be continuously and automatically running on your staging environment If any of those vulnerabilities are found, we should be able to mitigate them before things go into production. That framework helps us to visualize and propagate it to our customers as well.
All of those vulnerabilities should be continuously and automatically running on your staging environment If any of those vulnerabilities are found, we should be able to mitigate them before things go into production. That framework helps us to visualize and propagate it to our customers as well.
I think that lays out a great foundation of how organizations can approach that, especially the mindset point that you called out, where people are taking cues and really thinking differently about how they're going about doing their testing and making sure the APIs don't have those vulnerabilities. I'm curious about what sort of tools and methods that you would recommend.
I think that lays out a great foundation of how organizations can approach that, especially the mindset point that you called out, where people are taking cues and really thinking differently about how they're going about doing their testing and making sure the APIs don't have those vulnerabilities. I'm curious about what sort of tools and methods that you would recommend.
I think that lays out a great foundation of how organizations can approach that, especially the mindset point that you called out, where people are taking cues and really thinking differently about how they're going about doing their testing and making sure the APIs don't have those vulnerabilities. I'm curious about what sort of tools and methods that you would recommend.
Obviously, you know this space quite a bit. So what tools or methods would you recommend for continuously testing APIs and ensuring they remain secure as they evolve? And I think you may have touched on a couple there in your last answer, but I'm curious of what you would say.
Obviously, you know this space quite a bit. So what tools or methods would you recommend for continuously testing APIs and ensuring they remain secure as they evolve? And I think you may have touched on a couple there in your last answer, but I'm curious of what you would say.
Obviously, you know this space quite a bit. So what tools or methods would you recommend for continuously testing APIs and ensuring they remain secure as they evolve? And I think you may have touched on a couple there in your last answer, but I'm curious of what you would say.
It categorizes organizations into two types. One is organizations which are very early, just got started trying to get things out of the door and at least start building something. And the second, the series B, series C, post that enterprises which are mature, which are trying to build rigid pipelines, making sure everything goes as expected and as smoothly as possible.
It categorizes organizations into two types. One is organizations which are very early, just got started trying to get things out of the door and at least start building something. And the second, the series B, series C, post that enterprises which are mature, which are trying to build rigid pipelines, making sure everything goes as expected and as smoothly as possible.
It categorizes organizations into two types. One is organizations which are very early, just got started trying to get things out of the door and at least start building something. And the second, the series B, series C, post that enterprises which are mature, which are trying to build rigid pipelines, making sure everything goes as expected and as smoothly as possible.
So when we deal with early stage organizations, the problem is everybody is an engineer. There's no security when we are dealing with early stage companies. Everybody just wants to get things done. That's where we make a lot of mistakes when it comes to security. We take a lot of things for granted.