Pete Chestna, Checkmarx CISO, on the Technologies Enabling a Continuous ATO

With software becoming increasingly essential to today’s government and military, and digital transformation initiatives among…

Shifting Application Security Left Requires Changing Both Culture and Tools

In late August, the Advanced Technology Academic Research Center (ATARC) sponsored a Webinar in conjunction…

State Government Cloud Adoption Requires Cloud-Ready, Centralized AppSec

This article was originally featured on the Checkmarx blog. Click HERE to read the original…

application security
Seven reasons why federal agencies need a unified approach to application security

Today’s government agencies and military organizations are developing applications and digital services as fast as…

What to Look for in a Security Scanning Solution

Pointing out problems is not necessarily a bad thing. But simply pointing out problems without…

Six Ways AST Keeps Digital Citizen Services Secure

When in-person processes became impossible during the pandemic, the extent to which public sector services…

PODCAST: AST, DevSecOps and Developer Training – Three Essential AppSec Tools

Massive cyberattacks and breaches that originated in applications, including the recent SolarWinds breach that impacted…

Combating State and Local Cyberthreats with a Centralized Approach to AppSe

This article was originally featured on the Checkmarx blog. Click HERE to read the original…

Five Reasons Why Agencies are Choosing SAST Over WAF

This article was originally featured on the Checkmarx blog. Click HERE to read the original…

 

 

 

We launched GovDevSecOpsHub to focus on the next evolution of application development, DevSecOps, which brings cybersecurity teams and tools into the development process sooner so that applications are more secure and safeguarded against cyber threats.

In  GovDevSecOpsHub we’ll look at the evolution from traditional software and application development to the DevOps model. We’ll talk about the importance of moving from DevOps to DevSecOps. We’ll highlight the technologies and cultural changes necessary to make this shift happen. And we’ll profile government organizations and executives that are the “boots on the ground” as the government pivots towards the DevSecOps model.