Resources

DevOps | InfoSec

Your Secrets Management is a Ticking Time Bomb (If It’s Stuck in the Past)

Learn why legacy secrets management increases risk and what a modern, scalable secrets strategy looks like.

DevSec For Scale Podcast – Security Best Practices w/ Dr. Chase Cunningham

In this inaugural episode of the “DevSec for Scale” podcast, hosted by Jeremy Hess from Akeyless, the discussion revolves around the importance of embedding security within the development lifecycle, especially for startups. Jeremy introduces Dr. Chase Cunningham, known as Dr. Zero Trust, the creator of Forrester’s Zero Trust Extended framework. Chase shares his insights on […]

DevSec For Scale Podcast – Minimum Viable Security w/ David Melamed, Jit.io

In this episode of the “DevSec for Scale” podcast, Jeremy Hess interviews David Melamed, CTO and co-founder of Jit.io, a startup focused on continuous security. The conversation delves into the concept of Minimum Viable Security (MVS), which parallels the idea of Minimum Viable Product (MVP). David explains that MVS is about implementing a baseline level […]

DevSec For Scale Podcast – Improving Software Supply Chain Trust w/ Barak Brudo, Scribe Security

In this episode of the “DevSec for Startups” podcast, Jeremy Hess speaks with Barak Brudo, a developer advocate at Scribe Security, about the importance of software supply chain security and the role of Software Bill of Materials (SBOM). Barak explains that SBOMs provide a detailed breakdown of software components, including libraries and tools used, allowing […]

DevSec For Scale Podcast – Shift-Left Product Security w/ Neatsun Ziv, Ox Security

In this episode of the “DevSec for Scale” podcast, Jeremy Hess welcomes Neatsun Ziv, co-founder and CEO of Ox Security. They discuss the challenges startups face in implementing product security and the critical role penetration testing plays in revealing vulnerabilities. Neatsun shares that the initial penetration test often serves as a wake-up call for startups, […]

DevSec For Scale Podcast – Cloud Security for Startups w/ Moshe Ferber, CSA Israel

In this episode of the “DevSec for Scale” podcast, Jeremy Hess welcomes Moshe Ferber, Chairman of the Cloud Security Alliance (CSA) Israel Chapter. They discuss the importance of implementing proper security measures in startups, particularly those selling to enterprises. Moshe emphasizes that without proper security tools, startups may face challenges in business success, as enterprises […]

DevSec For Scale Podcast – Policy-as-Code w/ Eran Bibi, Firefly

In this episode of the “DevSec for Scale” podcast, Jeremy Hess interviews Eran Bibi, co-founder and Chief Product Officer at Firefly, about “policy as code” and its role in enhancing security for growing companies. They discuss how policy as code allows developers to define and enforce policies using code, integrating these policies within the CI/CD […]

DevSec For Scale Podcast – Proactively Building Secure Software w/ Josh Grossman, Bounce Security

In this episode of the “DevSec for Scale” podcast, Jeremy Hess interviews Josh Grossman, CTO at Bounce Security and an OWASP Israel board member, about integrating security into development processes. They discuss the limitations of traditional methods like penetration testing and the necessity of embedding security within normal development workflows. Josh emphasizes that continuously breaking […]

DevSec For Scale Podcast – Securing Access To Sensitive Data w/ Yoav Turgeman Levi, Harmonya

In this episode of the “DevSec for Scale” podcast, Jeremy Hess interviews Yoav Turgeman Levi, a Senior DevOps Engineer at Harmonya. Yoav shares his insights on the challenges of securing developer access in modern tech environments, emphasizing the balance needed between granting necessary permissions and maintaining security. Developers often seek high-level access to avoid workflow […]

DevSec For Scale Podcast – Software Supply Chain Security w/ Anton Weiss, Otomato Software

In this episode of the “DevSec for Scale” podcast, Jeremy Hess interviews Anton Weiss, a software delivery futurist and founder of Otomato Software. Anton shares insights on the importance of securing developer access and documenting build procedures to enhance security. He emphasizes that collaboration and proper documentation are essential in identifying and mitigating security risks […]

DevSec For Scale Podcast – Better Security Awareness for DevOps w/ Hila Fish, Wix

In this episode of the “DevSec for Scale” podcast, Jeremy Hess interviews Hila Fish, a senior DevOps engineer at Wix. Hila emphasizes the importance of cultivating a security mindset in DevOps from the start. She believes that consistently practicing security measures as part of daily routines can embed this mindset into regular workflows, making security […]

DevSec For Scale Podcast – OSINT and Security w/ Nick DiPasquale, Security Researcher

In this episode of the “DevSec for Scale” podcast, Jeremy Hess interviews Nick DiPasquale, a security professional with a background in system administration, systems engineering, and DevOps. Nick emphasizes that people remain the most common attack vector in security breaches, a challenge that persists despite technological advancements. He highlights the need for both technical and […]