Jason Riedel

📊 Managing security across hundreds of repositories? GitLab 18.2's Security Inventory gives AppSec teams: 1️⃣ Centralized view of scan coverage gaps 2️⃣ Portfolio-wide risk assessment 3️⃣ Direct remediation actions from one interface

157

6 Comments

Oligo Security 🤝 Endor Labs Modern teams ship code in minutes, but when security slows them down, developers skip the checks. The combination of Oligo and Endor Labs keeps the pipeline fast and secure -- by combining dev-time insights, runtime context, and real-time protection. 🔍 Endor Labs flags unsafe patterns before commit. 📊 Oligo adds runtime reachability and live SBOMs. 🔒 Together, we block exploits in prod and patch cleanly at the next build. Learn more at the link in the comments 👇 #AppSec #RuntimeSecurity #SoftwareSupplyChain

85

1 Comment

Communicating identity security’s value isn’t always easy, but it’s critical. Our new guide for CISOs offers a practical framework to help security leaders gain executive buy-in by connecting identity to resilience, efficiency, and growth. Click through for five must-dos, and download the full playbook for more: https://slpnt.co/45zA2dk

117

3 Comments

🚨 Most Kerberoasting attacks still bypass detection—despite being a 10+ year-old threat. Why? Legacy tools miss subtle, low-and-slow attacks. @BeyondTrust just built a statistical model that spots what rules-based tools can’t—with fewer false positives. How it works ↓ https://lnkd.in/gn_ascS8

38

ZTNA gets you on the track - but it won't get you across the Zero Trust finish line. 🏁 It’s built for access control. Not for visibility. Not for threat prevention. Not policy enforcement. Winning the Zero Trust race takes a platform built to see and secure everything, adapt in real time and at full speed—no blind spots, no pit stops. Read the blog to see how to go the distance: 👉https://bit.ly/45bjYyo #ZeroTrust #SASE #CISOStrategy

52

Access creep is real, and it’s putting your org at risk. ⚠️ Manual provisioning leads to identity sprawl, excessive privileges and forgotten access that lingers long after employees leave. See how automation and role-based access control (RBAC) can help you clean up your directories and enforce least privilege across AD and Entra ID. 👉 https://okt.to/DWZq0I #admanagement #IdentitySprawl #identitysecurity

36

50,000 findings. One security engineer. 250+ developers. That was Five9’s reality. With Endor Labs, they: - 96.5% fewer alerts (50k → ~40 actionable findings) - Resolved a zero-day across 40 projects in under 2 weeks - Gained dev trust because they can see the proof - Security embedded into CI/CD As Gregory Pettengill, Principal Product Security Engineer at Five9, said: “If it wasn’t for reachability, this program would fail. A little extra effort up front to onboard is worth the deep application context we use every day." https://lnkd.in/gr_7WeFi #AppSec #OpenSourceSecurity #SoftwareSupplyChain

64

5 Comments

Most IT teams are flying blind. 67% of SaaS apps are completely unknown to them. 33% of cyberattacks? They’re triggered by that blind spot. Shadow IT doesn’t ask permission. It creeps in. Builds risk. Drains resources. Creates waste. And your spreadsheet? It’s none-the-wiser until someone on your IT team hears from someone else in the organization that an app might exist in your SaaS environment. Then, and only then, does that spreadsheet get updated. If you can't see it, you can't manage it OR secure it. Get full SaaS visibility before the next attack gets in undetected. https://lnkd.in/gyeb3P23 #SaaSVisibility #ShadowIT #Cybersecurity #SaaSManagement #RiskReduction

32

🚫 Remediating every vulnerability isn’t realistic. So why keep trying? The key is prioritization. Our new blog explores how security teams are moving away from alert overload and toward risk-based decision making powered by AI, context, and automation. Learn how Veracode helps teams cut through the noise, eliminate critical security debt, and free up dev time with automated fixes and smarter triage. It’s time to move past traditional vulnerability management. 🔗 https://lnkd.in/e3CY8FMA

24

🚀 It’s here: The DSPM Architect’s Handbook! Building an Enterprise-Ready Data+AI Security Program For CISOs and senior security leaders: discover the proven framework to accelerate safe AI adoption, proactively manage enterprise-wide data risks, and maintain compliance across dynamic, hybrid environments. Gain strategic clarity to safeguard customer trust while driving innovation. For Data+AI security practitioners: gain the complete toolkit to design, implement, and operationalize a resilient DSPM program. Learn the foundational pillars, proven best practices, and how to avoid costly mistakes. 📖 Built on lessons from hundreds of enterprises, insights from veteran CISOs, and guidance from industry analysts, this handbook is your most actionable Data+AI security blueprint yet. 🎯 At Securiti, our mission is to enable the safe use of Data & AI. This book launch builds on our recently launched DSPM Fundamentals certification, now offering a deeper, actionable playbook for architects and leaders. Access your copy now and start building your enterprise-ready Data+AI security program 🔗 https://buff.ly/5M9vPe6 #DSPM #DataSecurity #AISecurity #EnterpriseAI #CISO #Securiti

37

1 Comment