Software Development Contract. What should you pay attention to
When a company needs a software that is not yet on the market, there are several solutions: 1) to select a product more or less suitable for its characteristics and “invest” in its development; 2) order the creation of a new software that will strictly…
Complex commercial products for Kubernetes Security
Aqua security Website: www.aquasec.com License: commercial This commercial tool is designed for containers and cloud workloads. It provides: Image scanning integrated with the container registry or CI / CD pipeline; Runtime protection with the search for changes in containers and other suspicious activity; Native container…
Dissemination of images and management of secrets + best Kubernetes Security Audit tool
Image Dissemination and Secrets Management Grafeas Website: grafeas.io License: free (Apache) Grafeas is an open source API for auditing and managing the supply chain of software. At a basic level, Grafeas is a tool for collecting metadata and audit results. It can be used to…
Runtime & Network Kubernetes security tools
Falco Website: falco.org License: free (Apache) Using the Sysdig tools for working at the Linux kernel level and profiling system calls, Falco allows you to deeply immerse yourself in the behavior of the system. Its runtime rule engine is able to detect suspicious activity in…
AppSoft recommends: tools for Kubernetes image scanning and static analysis
There are so many Kubernetes security software products and each has its own goals, scope and licenses. That’s why we decided to create this list and included in it both: open projects and commercial platforms from different suppliers. We hope that it will help you…
Microsoft explained how and when Flash Player will be disabled in their browsers
Till the end of 2020 support for the Flash Player in the original Edge, Chromium-based Edge, and Internet Explorer will be disabled. Although Adobe officially discontinued support for Flash Player in December 2020, browser developers since long time begun to abandon this technology. Since Microsoft…
What is a test plan and why do you need it?
Test plan – document that describes the entire scope of testing work, starting with a description of the test object, strategy, schedule, criteria of starting and ending testing, till necessary equipment, specialized knowledge and risks assessment with options for resolving them. Test-plan is needed for:…
QA metrics groups. Full tester guide
Group 1 – Requirements for the developed software This group of metrics will allow you to evaluate how we have followed the requirements (user story) for software, identify vulnerabilities and the most complex, potentially problematic features of the software, understand where special control is…