# security tools

Published articles for security tools.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Building an Agentic SOC on a Stream

DevFeed: [Building an Agentic SOC on a Stream](<https://devfeed.tech/articles/building-an-agentic-soc-on-a-stream-11549.md>)

Original publisher: [Read original article](<https://www.confluent.io/blog/building-an-agentic-soc-on-a-stream/>)

Author: Pavel Lineitsev

Published: 2026-09-10T19:19:05Z

Content type: article

Language: en

Sources: [Confluent: Data in motion](<https://devfeed.tech/sources/confluent-data-in-motion.md>)

Topics: [Agentic SOC](<https://devfeed.tech/topics/agentic-soc.md>), [SOC](<https://devfeed.tech/topics/soc.md>), [Security](<https://devfeed.tech/topics/security.md>), [Streaming](<https://devfeed.tech/topics/streaming.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Automation](<https://devfeed.tech/topics/automation.md>), [data loss prevention](<https://devfeed.tech/topics/data-loss-prevention.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [agentic](<https://devfeed.tech/tags/agentic.md>), [agentic-soc](<https://devfeed.tech/tags/agentic-soc.md>), [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [automation](<https://devfeed.tech/tags/automation.md>), [confluent-cloud](<https://devfeed.tech/tags/confluent-cloud.md>), [data-loss-prevention](<https://devfeed.tech/tags/data-loss-prevention.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [soc](<https://devfeed.tech/tags/soc.md>), [streaming](<https://devfeed.tech/tags/streaming.md>)

### AI overview

This article describes an Agentic SOC that uses AI agents and a continuous streaming architecture to investigate security alerts. Its pipeline combines central triage, specialized evidence agents, adversarial evaluation, and a self-learning knowledge base to analyze every alert, escalate higher-value cases, and surface true positives for analyst review. The approach is intended to address the backlog of low-priority alerts, including Data Loss Prevention alerts, whose volume makes manual investigation impractical.

### Source excerpt

Discover how our security team built an automated multi-agent investigation pipeline that scaled alert triage throughput using a continuous streaming architecture.

## Introducing Replik8s, a Modern Security Tool for Kubernetes

DevFeed: [Introducing Replik8s, a Modern Security Tool for Kubernetes](<https://devfeed.tech/articles/introducing-replik8s-a-modern-security-tool-for-kubernetes-29186.md>)

Original publisher: [Read original article](<https://www.latacora.com/blog/2025/09/22/introducing-replik8s/>)

Published: 2025-09-22T16:00:00Z

Content type: release

Language: en

Sources: [Latacora](<https://devfeed.tech/sources/latacora.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Security](<https://devfeed.tech/topics/security.md>), [Kubernetes clusters](<https://devfeed.tech/topics/kubernetes-clusters.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Incident response](<https://devfeed.tech/topics/incident-response.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>)

Tags: [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [incident](<https://devfeed.tech/tags/incident.md>), [incident-response](<https://devfeed.tech/tags/incident-response.md>), [kubectl](<https://devfeed.tech/tags/kubectl.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-clusters](<https://devfeed.tech/tags/kubernetes-clusters.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [other](<https://devfeed.tech/tags/other.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [trivy](<https://devfeed.tech/tags/trivy.md>)

### AI overview

Latacora introduces Replik8s, an open-source Kubernetes tool that snapshots cluster data, serves historical snapshots through a mirror API, supports kubectl and Trivy workflows, and provides query-based analysis for auditing and investigation.

### Source excerpt

Introduction # Security tools are often designed to highlight specific issues by consuming APIs and applying predefined logic. Each tool implements its own data structures, storage formats, and evaluation logic. While effective in narrow contexts, this approach creates challenges for teams managing a diverse toolset. Moreover, most tools are optimized to fetch only the data needed for specific findings, limiting their utility in broader contexts such as incident response or historical analysis.

## Minimizing False Positives: Enhancing Security Efficiency

DevFeed: [Minimizing False Positives: Enhancing Security Efficiency](<https://devfeed.tech/articles/minimizing-false-positives-enhancing-security-efficiency-8016.md>)

Original publisher: [Read original article](<https://snyk.io/blog/minimizing-false-positives-enhancing-security-efficiency/>)

Author: Tiago Mendo

Published: 2025-07-01T23:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [threat detection](<https://devfeed.tech/topics/threat-detection.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Detection engineering](<https://devfeed.tech/topics/detection-engineering.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [data](<https://devfeed.tech/topics/data.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [data](<https://devfeed.tech/tags/data.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [efficiency](<https://devfeed.tech/tags/efficiency.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [organizational](<https://devfeed.tech/tags/organizational.md>), [reduce](<https://devfeed.tech/tags/reduce.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [threat-detection](<https://devfeed.tech/tags/threat-detection.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

The article explains how false-positive security alerts consume investigation time, contribute to alert fatigue, and delay responses to genuine cyberattacks. It contrasts false positives and false negatives with accurate true-positive detection, emphasizing the value of security tools that improve accuracy and help organizations respond to real threats efficiently.

### Source excerpt

Discover how enhanced security tools reduce false positives and streamline threat detection for more effective cybersecurity management.

## Top 5 SAST Auto-fixing Tools and How They Compare

DevFeed: [Top 5 SAST Auto-fixing Tools and How They Compare](<https://devfeed.tech/articles/top-5-sast-auto-fixing-tools-and-how-they-compare-8216.md>)

Original publisher: [Read original article](<https://snyk.io/blog/top-5-sast-auto-fixing-tools-how-they-compare/>)

Author: Liqian Lim (林利蒨)

Published: 2024-10-29T15:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [snyk-code](<https://devfeed.tech/topics/snyk-code.md>), [AI Development](<https://devfeed.tech/topics/ai-development.md>), [Security](<https://devfeed.tech/topics/security.md>), [Development](<https://devfeed.tech/topics/development.md>), [Large Language Model](<https://devfeed.tech/topics/llm.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code](<https://devfeed.tech/tags/code.md>), [development](<https://devfeed.tech/tags/development.md>), [llms](<https://devfeed.tech/tags/llms.md>), [pmm](<https://devfeed.tech/tags/pmm.md>), [sast](<https://devfeed.tech/tags/sast.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [self-hosted](<https://devfeed.tech/tags/self-hosted.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability-detection](<https://devfeed.tech/tags/vulnerability-detection.md>)

### AI overview

This article examines five SAST auto-fixing tools and explains how AI-powered remediation can reduce the time developers spend fixing vulnerable code. It highlights Snyk Agent Fix, a self-hosted language model trained for vulnerability remediation and integrated with Snyk Code.

### Source excerpt

Speed Up Code Remediation with AI-Powered Tools. Learn about the top 5 SAST auto-fixing tools and their features to streamline your development workflow. Discover how Snyk Agent Fix can slash your remediation time by 84% or more.

## InCyber Forum Europe recap: 4 tips from DevSecOps experts

DevFeed: [InCyber Forum Europe recap: 4 tips from DevSecOps experts](<https://devfeed.tech/articles/incyber-forum-europe-recap-4-tips-from-devsecops-experts-7973.md>)

Original publisher: [Read original article](<https://snyk.io/blog/incyber-forum-europe-recap/>)

Author: Nina McClure

Published: 2024-08-14T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [DevSecOps](<https://devfeed.tech/topics/devsecops.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Development](<https://devfeed.tech/topics/development.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [customer](<https://devfeed.tech/tags/customer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [executive](<https://devfeed.tech/tags/executive.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [megawatt](<https://devfeed.tech/tags/megawatt.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [tips-and-tricks](<https://devfeed.tech/tags/tips-and-tricks.md>), [workflows](<https://devfeed.tech/tags/workflows.md>)

### AI overview

This recap presents expert advice from the InCyber Forum Europe on making DevSecOps practical. It emphasizes choosing application security tools that fit organizational culture and development workflows, reduce false positives, and support clear ownership and developer adoption.

### Source excerpt

Read four expert tips for establishing the right tools, process, and culture for a DevSecOps program, as discussed at the InCyber Forum Europe.

## Supabase Security Suite

DevFeed: [Supabase Security Suite](<https://devfeed.tech/articles/supabase-security-suite-390.md>)

Original publisher: [Read original article](<https://supabase.com/blog/hardening-supabase>)

Author: Paul Copplestone

Published: 2024-07-11T07:00:00Z

Content type: article

Language: en

Sources: [Supabase Blog](<https://devfeed.tech/sources/supabase-blog.md>)

Topics: [Supabase](<https://devfeed.tech/topics/supabase.md>), [Security](<https://devfeed.tech/topics/security.md>), [Shared Responsibility Model](<https://devfeed.tech/topics/shared-responsibility-model.md>), [dashboards](<https://devfeed.tech/topics/dashboards.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>)

Tags: [postgres](<https://devfeed.tech/tags/postgres.md>), [security](<https://devfeed.tech/tags/security.md>), [security-rules](<https://devfeed.tech/tags/security-rules.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [self-hosting](<https://devfeed.tech/tags/self-hosting.md>), [shared-responsibility](<https://devfeed.tech/tags/shared-responsibility.md>)

### AI overview

Supabase describes a three-month security, performance, and stability effort conducted with security researcher Eva and her colleagues. The article discusses Supabase's shared-responsibility approach, platform-integrated security tooling, use of Postgres Row Level Security, Lunchcat integration plans, Security Advisor rules and one-click fixes, and weekly security notifications for project owners.

### Source excerpt

Learn how to use range columns in Postgres to simplify time-based queries and add constraints to prevent overlaps.

## Developer and CISO perspectives on software supply chain security

DevFeed: [Developer and CISO perspectives on software supply chain security](<https://devfeed.tech/articles/top-10-things-devs-want-their-ciso-to-know-13295.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/top-10-things-devs-want-their-ciso-to-know>)

Published: 2024-05-09T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [ciso](<https://devfeed.tech/tags/ciso.md>), [communications-gap](<https://devfeed.tech/tags/communications-gap.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [developers](<https://devfeed.tech/tags/developers.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [shared-responsibility](<https://devfeed.tech/tags/shared-responsibility.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>)

### AI overview

This article presents ten insights from Chainguard and Harris Poll's 2023 CISO & Developer Trends in Software Supply Chain Security Report. It describes developers' concerns about security tools, productivity, communication, shared responsibility, expertise, organizational priorities, and tensions between developers and CISOs.

### Source excerpt

Bridge the dev-security gap! Learn essential insights for fostering a collaborative, secure development environment.

## DevOpsDays Singapore 2024: Unmasking the security pitfalls in AI-generated code

DevFeed: [DevOpsDays Singapore 2024: Unmasking the security pitfalls in AI-generated code](<https://devfeed.tech/articles/devopsdays-singapore-2024-unmasking-the-security-pitfalls-in-ai-generated-code-7891.md>)

Original publisher: [Read original article](<https://snyk.io/blog/devopsdays-singapore-ai-generated-code/>)

Author: Hiroko Nakano

Published: 2024-04-23T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [AI Development](<https://devfeed.tech/topics/ai-development.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [DevOps](<https://devfeed.tech/topics/devops.md>), [GitHub Copilot](<https://devfeed.tech/topics/github-copilot.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [aws](<https://devfeed.tech/tags/aws.md>), [blog](<https://devfeed.tech/tags/blog.md>), [coding](<https://devfeed.tech/tags/coding.md>), [community](<https://devfeed.tech/tags/community.md>), [copilot](<https://devfeed.tech/tags/copilot.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [gemini](<https://devfeed.tech/tags/gemini.md>), [github](<https://devfeed.tech/tags/github.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

The article summarizes Lawrence Crowther's DevOpsDays Singapore 2024 presentation on integrating security into DevOps while using AI-generated code. It discusses productivity benefits from tools such as GitHub Copilot, AWS Code Whisperer, and Google Gemini, alongside risks including SQL injection, XSS, outdated libraries, and other vulnerabilities. A Java search-functionality demonstration shows how Copilot can suggest insecure SQL and how appropriate prompts and security tools such as Snyk can help identify and correct these issues.

### Source excerpt

At DevOpsDays Singapore 2024, Snyk's Lawrence Crowther was featured as a keynote speaker. Here are some highlights from his presentation on the critical security integration within DevOps processes, focusing on AI-generated code and its potential to revolutionize software development while exposing vulnerabilities.

## 5 security best practices for adopting generative AI code assistants like GitHub Copilot

DevFeed: [5 security best practices for adopting generative AI code assistants like GitHub Copilot](<https://devfeed.tech/articles/5-security-best-practices-for-adopting-generative-ai-code-assistants-like-github-copilot-7776.md>)

Original publisher: [Read original article](<https://snyk.io/blog/5-security-best-practices-generative-ai-code-assistants-copilot/>)

Author: Liqian Lim (林利蒨)

Published: 2024-03-05T12:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Generative AI](<https://devfeed.tech/topics/generative-ai.md>), [AI-assisted coding](<https://devfeed.tech/topics/ai-assisted-coding.md>), [GitHub Copilot](<https://devfeed.tech/topics/github-copilot.md>), [code security](<https://devfeed.tech/topics/code-security.md>), [Code](<https://devfeed.tech/topics/code.md>), [snyk](<https://devfeed.tech/topics/snyk.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [ai](<https://devfeed.tech/tags/ai.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code-completion](<https://devfeed.tech/tags/code-completion.md>), [code-reviews](<https://devfeed.tech/tags/code-reviews.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [errors](<https://devfeed.tech/tags/errors.md>), [generative-ai](<https://devfeed.tech/tags/generative-ai.md>), [github-copilot](<https://devfeed.tech/tags/github-copilot.md>), [pmm](<https://devfeed.tech/tags/pmm.md>), [security-best-practices](<https://devfeed.tech/tags/security-best-practices.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

This article presents five security best practices for adopting generative AI code assistants such as GitHub Copilot. It emphasizes keeping humans in the loop, validating and reviewing AI-generated code, educating teams about risks, and using security tools and guardrails.

### Source excerpt

Learn how you can safely adopt AI code completion tools (like Copilot) by applying these 5 best practices and see how Snyk can make it easy to stay secure.

## Reporting AppSec risk up to your CISO

DevFeed: [Reporting AppSec risk up to your CISO](<https://devfeed.tech/articles/reporting-appsec-risk-up-to-your-ciso-8067.md>)

Original publisher: [Read original article](<https://snyk.io/blog/reporting-appsec-risk-to-your-ciso/>)

Author: Kate Powers Burke; Ezra Tanzer

Published: 2024-02-13T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [blog](<https://devfeed.tech/tags/blog.md>), [ciso](<https://devfeed.tech/tags/ciso.md>), [pmm](<https://devfeed.tech/tags/pmm.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

This article explains how AppSec teams can report prioritized application security risk to CISOs. It emphasizes clear reports, concise risk summaries, holistic visibility across code-based assets and software supply chains, and contextual prioritization beyond vulnerability counts and scores.

### Source excerpt

Learn what information CISOs need to know about your application security program in order to have a clear understanding of risk.

## Black Hat Asia customer panel recap: How to lead DevSecOps adoption

DevFeed: [Black Hat Asia customer panel recap: How to lead DevSecOps adoption](<https://devfeed.tech/articles/black-hat-asia-customer-panel-recap-how-to-lead-devsecops-adoption-7848.md>)

Original publisher: [Read original article](<https://snyk.io/blog/black-hat-asia-customer-panel-recap/>)

Author: Brian Piper

Published: 2023-09-18T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [DevSecOps](<https://devfeed.tech/topics/devsecops.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [Development](<https://devfeed.tech/topics/development.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [asia-pacific-japan](<https://devfeed.tech/tags/asia-pacific-japan.md>), [automation](<https://devfeed.tech/tags/automation.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [black-hat](<https://devfeed.tech/tags/black-hat.md>), [blog](<https://devfeed.tech/tags/blog.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [collaboration](<https://devfeed.tech/tags/collaboration.md>), [communication](<https://devfeed.tech/tags/communication.md>), [culture](<https://devfeed.tech/tags/culture.md>), [customer](<https://devfeed.tech/tags/customer.md>), [customer-featured](<https://devfeed.tech/tags/customer-featured.md>), [developers](<https://devfeed.tech/tags/developers.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [executive](<https://devfeed.tech/tags/executive.md>), [leadership](<https://devfeed.tech/tags/leadership.md>), [management](<https://devfeed.tech/tags/management.md>), [megawatt](<https://devfeed.tech/tags/megawatt.md>), [people](<https://devfeed.tech/tags/people.md>), [pipeline](<https://devfeed.tech/tags/pipeline.md>), [recap](<https://devfeed.tech/tags/recap.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [teams](<https://devfeed.tech/tags/teams.md>), [tech](<https://devfeed.tech/tags/tech.md>), [test](<https://devfeed.tech/tags/test.md>), [tips](<https://devfeed.tech/tags/tips.md>), [tools](<https://devfeed.tech/tags/tools.md>), [work](<https://devfeed.tech/tags/work.md>)

### AI overview

This recap of a Black Hat Asia 2023 customer panel presents leadership guidance for adopting DevSecOps. The panel emphasizes gradual cultural change, leadership support, effective stakeholder communication, feedback loops, strategic rollouts, and testing security tools with engineering teams.

### Source excerpt

Three experts came together at Black Hat Asia 2023 to discuss how leadership can participate in fostering security success.

## What kind of (security) dog are you?

DevFeed: [What kind of (security) dog are you?](<https://devfeed.tech/articles/what-kind-of-security-dog-are-you-8245.md>)

Original publisher: [Read original article](<https://snyk.io/blog/what-kind-of-security-dog-are-you/>)

Author: Belyn Lai

Published: 2023-08-25T17:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [base-images](<https://devfeed.tech/tags/base-images.md>), [components](<https://devfeed.tech/tags/components.md>), [containers](<https://devfeed.tech/tags/containers.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [developer](<https://devfeed.tech/tags/developer.md>), [developers](<https://devfeed.tech/tags/developers.md>), [development](<https://devfeed.tech/tags/development.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [regulatory](<https://devfeed.tech/tags/regulatory.md>), [sbom](<https://devfeed.tech/tags/sbom.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [shift-left](<https://devfeed.tech/tags/shift-left.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-team](<https://devfeed.tech/tags/snyk-team.md>), [testing](<https://devfeed.tech/tags/testing.md>), [third-party](<https://devfeed.tech/tags/third-party.md>), [tool](<https://devfeed.tech/tags/tool.md>), [tools](<https://devfeed.tech/tags/tools.md>), [training](<https://devfeed.tech/tags/training.md>)

### AI overview

A playful Snyk quiz for International Dog Day uses security-dog personalities to explore how organizations handle SBOMs, open source components, AI, third-party base images, security tools, pipeline testing, shift-left practices, and security training.

### Source excerpt

In honor of International Dog Day, we've created a quiz: What kind of (security) dog are you? And while you're taking it, tell your dog that we say hi and give that good boy or girl a treat on our behalf!

## Hubble: Our Tool for Encapsulating and Extending Security Tools

DevFeed: [Hubble: Our Tool for Encapsulating and Extending Security Tools](<https://devfeed.tech/articles/hubble-our-tool-for-encapsulating-and-extending-security-tools-1435.md>)

Original publisher: [Read original article](<https://shopify.engineering/hubble-encapsulation-extend-security>)

Author: Tony Cummings

Published: 2022-10-21T17:55:34Z

Content type: article

Language: en

Sources: [Shopify Engineering](<https://devfeed.tech/sources/shopify-engineering.md>), [Shopify Engineering - Shopify Engineering](<https://devfeed.tech/sources/shopify-engineering-shopify-engineering.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Security & Privacy](<https://devfeed.tech/topics/security-privacy.md>), [Provisioning](<https://devfeed.tech/topics/provisioning.md>), [backends](<https://devfeed.tech/topics/backends.md>)

Tags: [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [devices](<https://devfeed.tech/tags/devices.md>), [provisioning](<https://devfeed.tech/tags/provisioning.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [systems](<https://devfeed.tech/tags/systems.md>), [tools](<https://devfeed.tech/tags/tools.md>)

### AI overview

Shopify built Hubble to simplify and centralize internal security operations. The tool integrates mobile device management and other security services, standardizes data from multiple systems, sends commands back to them, and provides inventory, device management, auditing, and granular access controls.

### Source excerpt

With the end of office centricity at Shopify, suddenly the work of securing our devices got a lot more important, and a lot more difficult. So, we built Hubble.