News and Notes from the makers of Nexus | Sonatype Blog

Happy Developers Produce More Secure Software, Better Business Outcomes

By Derek Weeks on April 07, 2020 vulnerabilities

The 2020 DevSecOps Community Survey confirms correlations between DevSecOps culture and practices, and their influence on motivation and job satisfaction.

Read More...

OWASP Security Knowledge Framework

By Daniel Longest on March 24, 2020 security

OWASP's security knowledge framework (SKF) is a method to help web and app developers establish best practices at each stage of product development.

Read More...

DevSecOps for a Dollar or Less

By Derek Weeks on October 07, 2019 OWASP

The DevSecOps Maturity Model (DSOMM) helps you analyze your organization's development pipeline to see where you need to improve.

Read More...

HackNYC 2018: Preview with Kevin E. Greene [Podcast]

By Mark Miller on February 07, 2018 OWASP

Kevin Greene is on the organizing committee for HackNYC, helping to organize talks and sessions around protecting and securing our national infrastructure.

Read More...

HackNYC 2018: Preview with Dr. Bill Curtis [Podcast]

By Mark Miller on February 01, 2018 OWASP

In May, at HackNYC 2018 in New York City, Dr. Bill Curtis' team of Tracie Gerardi and Lev Lesokhin will deliver a presentation on putting an end to "Technical Debt".

Read More...

Thoughts on Security in the Modern Software Supply Chain [Podcast Interview]

By Mark Miller on January 15, 2018 OWASP

A conversations about government vs public software security, the OWASP Top 10 and common security patterns in large scale projects.

Read More...

The OpenChain Project with Shane Coughlan [Podcast Interview]

By Mark Miller on January 12, 2018 OWASP

In this broadcast, I speak with Shane Coughlan, project director, about the purpose of the OpenChain project and what his team hopes to accomplish in 2018.

Read More...

Nexus Firewall: Quality at Velocity

By Mike Hansen on November 17, 2015 nexus pro

Nexus Firewall: Quality at Velocity

Read More...

DevOps Leadership Series: Security at Velocity [Video]

By Derek Weeks on May 12, 2015 Software Supply Chain

If it does not fit, it does not get done. For many DevOps practices, application security falls into the “does not get done” bucket. That’s because for many DevOps-centric organizations, application

Read More...

What Happened Sept 16th?

By Derek Weeks on September 23, 2014 Cyber Supply Chain Management and Transparency Act

We led an invasion last week armed with a flying drone, glowing lightsabers, and the latest knowledge on open source security vulnerabilities. Our mission? Lead, share, educate, moderate, and have

Read More...