Security Theater: Your AppSec Success Metrics Are Misleading
Shift from security theater to effective application security by replacing metrics that incentivizes poor development habits with those that optimize AppSec.
Palo Alto Networks
AppSec
Security Theater: Who Cares About Your AppSec Findings?
Vulnerability findings can be misleading. Learn how to create context around application vulnerability findings so you know which pose the greatest threat to your organization.
Security Theater: Don’t Hang your Hat on Compliance
Explore the illusions of cloud security in our blog series on Security Theater. Learn how to go beyond compliance to implement effective security practices.
All the Small Things: Azure CLI Leakage and Problematic Usage Patterns
Developer usage patterns with Azure CLI may leak sensitive data in CI/CD logs when used in public repositories, potentially exposing critical information.
Unpinnable Actions: How Malicious Code Can Sneak into Your GitHub Actions W...
Action pinning doesn’t always offer security. Understand risks stemming from the GitHub Actions ecosystem and learn how to avoid compromise of CI/CD pipeline.
AppSec for the Modern Engineering Ecosystem
Software engineering is changing, becoming a driving force in business and bringing about big changes in how application security (AppSec) is approached. Let’s take a look at what this paradigm shift means for ...
AppSec and CloudSec 101: Blurring the Lines Between Cloud-Native App Layers
Get tips for leveraging infrastructure as code to maintain cohesive application and infrastructure security for your cloud-native teams.
A Primer on Secure DevOps: Learn the Benefits of These 3 DevSecOps Use Case...
Learn best practices and benefits of taking a DevSecOps approach to AppSec, IaC security and software supply chain security.
Prisma Cloud Announces Software Composition Analysis (SCA) To Help Organiza...
Prisma Cloud’s new Software Composition Analysis (SCA) solution brings code-level application and infrastructure security into a single code-to-cloud platform.
Subscribe to the Blog!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.