A 45-minute discussion of top security mistakes made while developing custom applications and how to avoid them.
[Video] Continuous Delivery With GitOps (Using Kubernetes): Concepts + Code Walkthrough
A one-hour discussion of Continuous Delivery with GitOps (using Kubernetes) with key concepts and real-time examples featuring trunk-based development and feature flags.
Keyhole Announces Education Series: Continuous Delivery With GitOps and Top Security Mistakes in AppDev
We are excited to announce the August 2022 Keyhole Education Series!
This series consists of two educational lunch and learn events open to the public. The presentations are geared to benefit software developers who are implementing or interested in using GitOps, Kubernetes, DevSecOps, and Security.
White Paper: Security Best Practices in Application Development
This white paper provides key takeaways for application stewards and software leaders to improve application security, with examples of common application security liabilities and suggestions for remediation. Topics include:
An in-depth look into Security Culture and the importance of the people element in adopting a security-first outlook.
An explanation of common application practices we frequently see in the wild that can be inherently risky, with suggestions for best practices.
A security checklist to determine critical areas of higher risk to prioritize in your journey to a more secure application.
Anย explanation of the security Surface Area and how to minimize it starting from your source code.
Strategies to protect Authentication and Authorization and a comparison between Third-Party solutions and rolling your own auth.
A deep dive into built-in Application Security and an exploration of strategies that might help your business, including Network-Level Security, WAF, Payload Encryption, SSL, Cloud Configuration, and SIEM…
[Video] Serverless Framework: Concepts + Code Walkthrough | Deploying To AWS, Azure & Multi-Cloud
A 55-minute dive into the “Serverless” framework, an open-source tool that aims to simplify building, packaging, and deploying serverless applications across multiple cloud providers and platforms like AWS, GCP, Azure, and Kubernetes.





