Innovation | Carahsoft

Expert Edition: How to Scale DevSecOps

In this ebook, we share insights from both government and industry leaders about how to successfully move from pilots and limited agile programs to full-blown agencywide DevSecOps implementations.
- DevSecOps, All

Building a DevSecOps Culture

The complexity of modern software has created blind spots and vulnerabilities that bad actors are eager to exploit. In response, the government is stepping up efforts to bolster software security.
- DevSecOps, All

The Road to Secure Software Development

DevSecOps can help agencies create secure and innovative applications while achieving the ultimate goal of better mission outcomes.
- DevSecOps, All

The Mindset Shift that Enables DevSecOps

Alex Barbato, public-sector solutions engineer at VMware, explains how, once the development, security and operations teams are aligned, agencies can move forward on modernization.
- DevSecOps, VMware

How Generative AI Improves Software Security

Robert Larkin, senior solutions architect at Veracode, explores the generative AI technology that takes the guesswork out of fixing unsecure code before applications are deployed.
- DevSecOps, Veracode

Open Source is at the Heart of Software Innovation

Chris Mays, staff specialist solutions architect at Red Hat, details why a pervasive view into far-flung networks is critical, and how next-generation packet brokers can help achieve that visibility.
- DevSecOps, Red Hat

DevSecOps Needs Tool Diversity and Collaboration

Ben Straub, head of public sector at Atlassian, explains how incorporating best practices for collaboration and tooling diversity can transform an agency’s capacity for success.
- DevSecOps, Atlassian

Observability Speeds Zero Trust and Application Security

Willie Hicks, public-sector chief technologist at Dynatrace, details how using AI-driven observability throughout the software life cycle ensures the ongoing performance and security of applications.
- DevSecOps, Dynatrace

The Role of a Service Mesh in Zero Trust Success

Zack Butcher, founding engineer at Tetrate and co-author of the NIST SP 800-200 series and SP 800-207A, explores the infrastructure layer that's a key tool for enforcing security standards and limiting the damage an attacker can do.
- DevSecOps, Tetrate

AI and the Journey to Secure Software Development

Joel Krooswyk, federal CTO at GitLab, details why automation is evolving from identifying vulnerabilities to providing seamless, AI-assisted developer workflows.
- DevSecOps, GitLab

Scaling App Development While Meeting Security Standards

Kyle Tobener, head of security and IT at Copado, explains how a low-code platform can accelerate the delivery of innovation while ensuring secure and bug-free software.
- DevSecOps, Copado

Executive Viewpoint: A Conversation with Sean McIntyre

Sean McIntyre, Director for Solution Delivery Service at the Federal Aviation Administration, answers questions about DevSecOps.
- DevSecOps, All

Expert Edition: Best Practices for Implementing DevSecOps

Having secure software is fundamental, and DevSecOps helps agencies get there and deliver user-tailored applications faster. No matter where your agency is on adopting DevSecOps, it’s critical to realize that — like most things IT — moving to a methodology for software that integrates development, security and operations is not just a matter of making the right technology choices.
- DevSecOps, All, Atlassian

Modernizing Software Development in a Fast-Changing World

DevSecOps is at the heart of efforts to build, secure and maintain the apps that make digital transformation possible.
- DevSecOps, All

Executive Viewpoint: A conversation with Hannah Hunt

Hannah Hunt, Chief Product and Innovation Officer, Army Software Factory, Army Futures Command, discusses The Army Software Factory.
- DevSecOps, All