Wiz Defend está aqui: detecção e resposta a ameaças para a nuvem
Wiz

Academia CloudSec

Bem-vindo à CloudSec Academy, seu guia para navegar pela sopa de letrinhas dos acrônimos de segurança em nuvem e jargão do setor. Livre-se das distrações com conteúdo claro, conciso e habilmente elaborado, cobrindo os fundamentos para as melhores práticas.

TodosCode SecurityComplianceDetection and ResponseCloudSecContainers/K8sAI SecurityThreat LandscapeToolsBest Practices

What is Application Security (AppSec)?

Ziad Ghalleb

Application security refers to the practice of identifying, mitigating, and protecting applications from vulnerabilities and threats throughout their lifecycle, including design, development, deployment, and maintenance.

Securing Cloud IDEs

Lauren Place

Cloud IDEs allow developers to work within a web browser, giving them access to real-time collaboration, seamless version control, and tight integration with other cloud-based apps such as code security or AI code generation assistants.

Secure SDLC

Swaroop Sham

Secure SDLC (SSDLC) is a framework for enhancing software security by integrating security designs, tools, and processes across the entire development lifecycle.

What is interactive application security testing (IAST)?

Equipe de especialistas do Wiz

IAST (Interactive Application Security Testing) is a security testing method that monitors applications in real-time during runtime to detect vulnerabilities by analyzing code behavior and data flow in live environments.

Source Code Leaks: Risks, Examples, and Prevention

Equipe de especialistas do Wiz

In this blog post, we’ll explore security measures and continuous monitoring strategies to prevent these leaks, mitigating the risks posed by security vulnerabilities, human error, and attacks.

Secrets Detection: A Fast-Track Guide

Ziad Ghalleb

Secrets detection is the process of identifying and managing sensitive information like API keys, passwords, and tokens within codebases to prevent unauthorized access and data breaches.

Top 9 OSS API Security Tools

Equipe de especialistas do Wiz

A guide on the 9 best OSS API security tools that protect sensitive data, infrastructure, and business logic from unauthorized access, data theft, and other attacks.

SAST vs. SCA: What's the Difference?

Ziad Ghalleb

SAST (Static Application Security Testing) analyzes custom source code to identify potential security vulnerabilities, while SCA (Software Composition Analysis) focuses on assessing third-party and open source components for known vulnerabilities and license compliance.

What is Security as Code (SaC)?

Ziad Ghalleb

Security as Code (SaC) is a methodology that integrates security measures directly into the software development process. It involves codifying security policies and decisions, and automating security checks, tests, and gates within the DevOps pipeline.

What is Policy as Code? 

Ziad Ghalleb

Policy as code (PaC) is the use of code to define, automate, enforce, and manage the policies that govern the operation of cloud-native environments and their resources.

GitOps vs. DevOps

Ziad Ghalleb

While DevOps delineates collaboration and automation practices that emphasize infrastructure provisioning and continuous monitoring, GitOps extends its concepts by employing Git as the single source of truth for both application and infrastructure settings.

What is Security by Design?

Equipe de especialistas do Wiz

Security by design is a software development approach that aims to establish security as a pillar, not an afterthought, i.e., integrating security controls into software products right from the design phase.

Guide to Standard SBOM Formats

Equipe de especialistas do Wiz

Two major formats dominate the SBOM ecosystem: Software Package Data Exchange (SPDX) and CycloneDX (CDX). Let’s review!

Segurança de código (Code Security)

Swaroop Sham

A segurança de código, também conhecida como codificação segura, refere-se às práticas, metodologias e ferramentas projetadas para garantir que o código escrito para aplicativos e sistemas esteja protegido contra vulnerabilidades e ameaças.

What is DevSecOps?

Swaroop Sham

DevSecOps, which stands for Development, Security, and Operations, is a software development practice that emphasizes integrating security considerations throughout the entire development lifecycle, from initial design to deployment and ongoing maintenance.

DevSecOps Best Practices Checklist

Equipe de especialistas do Wiz

In this article, we’ll look at the emergence of DevSecOps and then discuss actionable best practices for integrating DevSecOps into your workflows.

Software Supply Chain Security Best Practices

Equipe de especialistas do Wiz

In this blog post, we’ll take a deep dive into software supply chains and discuss effective strategies for reducing security risks.

The Open-Source Code Security Tool Roundup

Equipe de especialistas do Wiz

This article will give you a refresher on code security and review the most popular open-source code security tools available.

Malicious Code Explained

Equipe de especialistas do Wiz

Malicious code is any software or programming script that exploits software or network vulnerabilities and compromises data integrity.

CI/CD Pipeline Security Best Practices

Nicolas Ehrman

Continuous integration and continuous delivery (CI/CD) have become the backbone of modern software development, enabling rapid, reliable, and consistent delivery of software products. To bolster your CI/CD pipeline, ensuring resilience against ever-evolving threats, follow the best practices in this guide.