Name: Fortify 20.2 in the Day-to-Day of an Application Security Program
Start: 2021-02-25T18:00:00Z
End: 2021-02-25T18:00:49.000Z
Location: BrightTALK
Rating: 3.5

Orasi is a DevSecOps innovator enabling the acceleration, security, delivery, and adoption of software applications and cloud infrastructure through automation. Orasi AppSec and OrasiCloud solutions and services offer full lifecycle support and integration to ensure scalability of transformative applications. Also the makers of OrasiLabs, the train anyone anywhere anytime AWS cloud-native virtual eLearning platform, Orasi works with hundreds of global brands as customers and partners, including Fortune 500 companies, across a variety of industries

While tools such as SAST, DAST, OSS, and Pen Testing are vital to a company’s application security program, using them as separate solutions amongst teams can lead to a lack of communication and visibility. In addition, siloed security testing tools don’t offer the necessary data insight into enterprise-wide threats or provide high-level trend and executive dashboard capabilities. 
 
Saltworks’ new Application Security Posture Management platform, SaltMiner, was created to address these issues. It allows enterprises to aggregate, analyze, and report on results from scans conducted using different technologies, and to do it at scale. In addition, SaltMiner can provide a self-service portal for development, providing them with open vulnerabilities from all sources, ranked and prioritized based on your business rules. They know what to remediate and when without wading through pages of scan results or waiting on AppSec to provide.   
 
Tune in to this upcoming webinar, hosted by Orasi’s partner, Saltworks Security, to learn more about SaltMiner. Hear how the Saltworks team saw the industry’s need for an enterprise wide AppSec dashboard in their day-to-day work with high-profile organizations and designed the tool with their customers’ needs in mind. In addition, see how SaltMiner empowers enterprises to see a true enterprise-wide picture of AppSec risks and needs through:

1. Drill-down and customizable reporting filterable by business unit/owner, vulnerability type, criticality level, IP range, vulnerability trends, and more
2. Compliance-proving results, with exportable application security results and data for GRC, SOCs, other dashboards, etc.
3. Focused vulnerability reports for testers that maximize their efforts

Can AppSec and Increasing Release Velocity Co-Exist?...We think so!

Are you struggling with moving to the cloud? Having trouble replatforming your existing applications?  Trying to deploy to multiple public clouds without duplicating work? Need a secure versioned repository of configuration options for rollback and auditing? Want to centralize your secrets management with automated rotation and expiration?

If any of these apply to you, join this webinar to learn why the HashiCorp products are the most widely used tools for modernizing cloud infrastructure. With over 100 million downloads, HashiCorp’s proven “Infrastructure as Code” approach enables customers to quickly provision, secure, connect and run environments on demand using simple commands under version control. And, best yet, the HashiCorp architecture is completely vendor-agnostic so can be used to deploy on or across just about any cloud or virtualized platform, including AWS, Azure, GCP, OCI, Docker, Kubernetes, VMware, just to name a few.

In this first 30-minute installment of our 3-part series, we’ll explore what “Infrastructure as Code” really means and how the HashiCorp products use this innovative approach to make cloud deployments predictable and secure. We’ll talk about each of the 4 stages of cloud deployment, including provisioning, securing, connecting, and running environments on demand. And finally, we’ll provide a short demonstration of this technology in action so you can see for yourself how easy it should be to migrate to the cloud.

Agenda
• Introduction (5 mins)
• Infrastructure as Code (10 mins)
• The HashiCorp Product Architecture (5 mins)
• Demonstration (10 mins)
• Q&A

Automate Your Cloud Infrastructure with the HashiCorp Products

Login VSI, the only provider of 360° proactive visibility into the performance, cost, and capacity of virtual workspaces, is partnering with Orasi, your strategic DevOps advisor, for an engaging live virtual event. See how our partnership can provide your organization with an automated way to measure experience, end-to-end observability, and actionable testing insights into the impact of any change in an evaluation, pre-production or production environment.
 
Join us on February 23rd at 1 PM EDT for an expert-led discussion where you will learn how to: 
   • Reframe your strategic outlook
   • Build the ideal production toolkit 
   • Validate the impact of change in digital workspaces 
   • And more! 
 
In less than an hour, you will discover how to apply strategic approaches to daily operations, achieve wildly successful outcomes, and access an exclusive look into what’s coming next for the Login Enterprise platform. Don’t wait. Make sure to register today!

Uncover Unmatched Strategies for Development to Deployment and Everyday Success

The impact of the business need for faster cycles and increasing flexibility is driving DevOps and Cloud ideas throughout the IT value stream. This has significant meaning for the compute side of the world.  We will explore the “Environments on Demand” and how it impacts the IT Value Stream. We will examine key elements of DevOps and cloud that help address the new world and optimize the investment.

In this session, we will discuss: 

1. Accelerating Change – Driving Forces (eg. Change Drivers, Industry Impact)
2. DevOps and Cloud – The Foundation (eg. Continuous Flow, Pipeline, Cloud Services)
3. Environments on Demand – Key Elements (eg. Infrastructure as Code (IAC), Automation, Integration & Ephemeral)
4. Environments on Demand – Real World Scenarios

Presented by: 
Terry Brennan, Managing Director, Orasi

DevOps and Cloud: Driving Environments On Demand and Optimizing Investments

Do you need to provide effective training on EHR and other critical applications? Need to train a geographically dispersed staff in a cost-effective manner? Are you struggling with physical classroom constraints and the cost of training hardware? If you need to onboard large groups of interns quickly, accelerate application understanding, and provide practice of real-world scenarios, OrasiLabs can help!
 
Join this webinar to learn how healthcare organizations:
 
- Effectively use hands-on, virtual labs to accelerate the delivery of software application training. 
- Leverage the power, scalability, and security of the cloud with an easy-to-use interface specifically built for training. 
- Reduce complexity and simplify delivery with drag and drop creation of environments and an instructor-friendly class delivery interface.
- Provide learners with dedicated, completely configured training environments using only a browser and internet connection. 
 
This 20-minute webinar will explore how OrasiLabs brings a modern approach to software application training. We’ll talk about how OrasiLabs benefits both instructors and learners. And finally, we’ll provide a short demonstration of this technology in action so you can see how you can standardize training more efficiently than ever across your workforce.

Standardize Training and Onboard Faster with Virtual Technology

Are you looking for a better way to deliver hands-on software application training to customers and partners? Do you need to drive product adoption with training programs? Are you tired of wasting valuable class time troubleshooting learning environments? If you need to reduce complexity, monitor learner progress in a virtual setting, and leverage the cloud for training environments, OrasiLabs can help!
 
Join this webinar to learn how software providers:
 
Effectively use hands-on, virtual labs to accelerate the delivery of software application training. 
Leverage the power, scalability, and security of the cloud with an easy-to-use interface specifically built for training. 
Reduce complexity and simplify delivery with drag and drop creation of environments and an instructor-friendly class delivery interface.
Provide learners with dedicated, completely configured training environments using only a browser and internet connection. 
 
This 30-minute webinar will explore how OrasiLabs brings a modern approach to software application training. We’ll talk about how OrasiLabs benefits both instructors and learners. And finally, we’ll provide a short demonstration of this technology in action so you can more effectively provide hands-on software application training to your customers and partners.

How Training Programs Can Drive Product Adoption

Have you struggled with moving your production applications to a public cloud? Do you want to take advantage of each cloud platform strength without getting locked into a vendor-specific design? Do you need to centralize your cloud configurations in a secure version repository with audited approval chains? Do you have difficulty identifying exactly what to change once a cloud architecture is already deployed?

If any of these apply to you, join this webinar to learn why HashiCorp Terraform is the most widely used infrastructure provisioning tool on the planet. Terraform’s unique capabilities to plan, manage state, and apply infrastructure changes across a vast array of cloud and private platforms have made it the defacto standard for cloud configuration.

In this second 30-minute installment of our 3-part series, we’ll explore techniques for provisioning in the cloud and how Terraform addresses these issues. We’ll also provide detailed examples of how to inject Terraform into your configuration process, including suggestions on defining automated collaboration features that are critical to a large organization. We’ll even demonstrate a working Terraform configuration and show how easy it is to apply changes across a range of environments.

Automate Provisioning, Compliance, and Management of Cloud Infrastructure

The impact of the business need for faster cycles and increasing flexibility is driving DevOps and lean ideas throughout the IT value stream. This has significant meaning for the compute/infrastructure side of the world. In this webinar, we will explore the idea of “Environments on Demand” and how it can impact the IT Value Stream. We will also examine key elements required to making “Environment on Demand” a reality such as IAC, automation, and other concepts.

Environments-on-Demand: Ephemeral Environments in a Continuous World

The changing needs of the business and evolution of DevOps are driving organizations to reexamine how they test. Accelerating cycles, increasing need for flexibility, and the influx of DevOps and lean ideas require new thinking like Continuous Testing. This shift has significant meaning for QA organizations and application testing.  

In this webinar, we will delve into how automation, shifting left, ephemeral environments, and other DevOps/lean concepts are driving change into the IT value stream. We'll explore the idea of Continuous Testing and how it can help change your testing strategy to keep pace with tomorrow’s needs.

Continuous Testing: A Look into Test Automation and Shifting Left

Managing cloud costs is a critical component of modern day software delivery. But how do you understand costs, optimize them, and create guardrails - and how do you do that continuously? Harness ran into these same problems building its own platform, and so built their own tool geared towards creating continuous efficiency for engineering and FinOps practitioners. Learn more about their own journey and the benefits they’ve seen from using their own product in this webinar.

How to continuously optimize modern cloud native platforms?

The Cloud is accelerating and changing how we think of infrastructure and environments. The acceleration of the business cycles and increasing need for flexibility is driving DevOps and lean ideas throughout the IT value stream. This has significant meaning for cloud infrastructure. We will explore how ephemeral, “as code”, shifting left, and other DevOps concepts are driving change into the IT value stream, accelerating infrastructure automation, and impacting the cloud infrastructure. We will explore the idea of Continuous Compute to address the new requirements being placed on today’s organizations.

Accelerating Cycles for Cloud Infrastructure

DevOps is quickly becoming a key to IT and business success. The rapid pace of business change requires more nimble, flexible, and lean approaches like DevOps to meet tomorrow demands. DevOps has evolved through multiple generations and is pushing towards Continuous Flow requiring technical, process, and people evolution to keep pace. We will explore how DevOps has evolved and the impact to technologies, processes, and beyond. We will explore ways to chart your path forward in this brave, new world.

NextGen DevOps: The Evolving DevOps Journey

Todd Williams, AVP, Sales – APM & Observability, speaks with Chuck Harold on why "DevSecOps" is becoming more prevalent and what it really means. Todd also discusses why application testing and performance monitoring are critical parts of a DevSecOps infrastructure.

Integrate Security into the Entire DevOps Process

Orasi’s Karen Spencer sits down with Chuck Harold to discuss the kind of virtual training the OrasiLabs platform provides and how OrasiLabs makes a measurable difference to effectively train distributed employees on security software and secure coding.

How Cloud-based Virtual Software Training Drives Digital Transformation

In his previous webinars, Joe Schulz, VP Emerging Technology at Orasi Software and Training Evangelist, described his “7 Essentials” for turning boring, presentation-based online training into interactive, hands-on training that drives student retention. 

In this webinar, Joe will expand on that topic and discuss the technology needed to make this happen. Using real-world examples, he’ll demonstrate how to quickly setup and deliver an online class with OrasiLabs, one of the industry leading platforms for training lab environments. He’ll also talk about how OrasiLabs can be used standalone or in conjunction with a Learning Management System (LMS).

Primary Takeaways
• 7 Essentials to make online training interactive and engaging
• Technology platforms needed for each stage of the class lifecycle
• OrasiLabs functionality overview and demonstration

Make Your Online Training Interactive and Engaging Using OrasiLabs

Automation is increasingly becoming a critical aspect of infrastructure management. The acceleration of the business cycles and increasing need for flexibility is driving DevOps and lean ideas throughout the IT value stream.  This has significant meaning for the infrastructure side of the world.  We will explore how ephemeral, “as code”, shifting left, and other DevOps concepts are driving change into the IT value stream, accelerating infrastructure automation, and impacting the infrastructure world.  We will explore the idea of Continuous Compute to address the new requirements being placed on today’s infrastructure and supporting organizations.

Ephemeral: Here Today, Gone Tomorrow

How do the new features and functions of Fortify 20.2 affect daily users and their Application Security programs as a whole? The Saltworks Security and Micro Focus teams are coming together on this webinar hosted by Orasi Software to discuss Fortify 20.2 from a holistic program perspective. 

Saltworks Security is an Application Security consulting company, partnering with organizations to build and mature world-class AppSec programs from Policy to Production. Because a core part of AppSec services involves partnering with customers to deploy and optimize the use of Fortify, we have a day-to-day view on how users are leveraging Fortify 20.2 in their enterprises’ development life cycles.

Saltworks and Micro Focus have worked together over the years as partners alongside Orasi Software, Saltworks’ sister company and DevOps expert. Join Jimmy Rabon and Rick Smith, Directors of Product Management for Micro Focus Fortify and Dennis Hurst, Founder and President of Saltworks Security, for an interactive discussion on how Fortify 20.2 is benefiting AppSec programs and SDLC processes from a holistic, Policy-to-Production perspective.

Fortify 20.2 in the Day-to-Day of an Application Security Program

Application Security

Vulnerability Scanning

Application Lifecycle Management

Application Development

Web Application Security

Security

DevOps

Enterprise Applications

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Fortify 20.2 in the Day-to-Day of an Application Security Program

Presented by

About this talk

More from this channel