Resources

Case Study

AI Data Platform Becomes FedRAMP® Audit-Ready in Less Than 90 Days on AWS

To diversify and expand cloud services to the federal market, a leading artificial intelligence (AI) data platform and machine learning (ML) training organization decided to pursue FedRAMP certification. With limited engineering staff, the organization needed help navigating the complex FedRAMP landscape to achieve Authority to Operate (ATO).

March 15, 2021

• Compliance
• FedRAMP®

Case Study

ID Security Software Firm Reduces Costs and Time to Market for FedRAMP® on AWS

As cloud enterprises embark on digital transformation journeys, capabilities such as intelligent insights, visibility, governance, and extensible security are critical components to this leading identity security firm’s solutions. To protect their market position and comply with government security requirements, the firm needed to develop a secure, audit-ready cloud environment and achieve FedRAMP Authority to Operate (ATO).

March 15, 2021

• Cloud

Webinar

Optimizing Security Velocity in Your DevSecOps Pipeline at Scale

To protect the business, dev and security teams are deploying multiple app/network/OSS security testing tools, internal & 3rd party manual assessments, and other processes which in turn drives an exponential spike in volume of issues to analyze, correlate, triage, route and repair...

February 18, 2021

• Application security

Report

3rd Annual Penetration Risk Report

The 2020 Securealities Risk Report has uncovered several alarming trends in overall security posture that leave many organizations at risk of a breach or other exposure.

December 31, 2020

• Cybersecurity

Video

Introduction to ThreadFix® Tagging

In this video we will talk about how to think about tags for your ThreadFix® environment, how to set up tags and tag various items in ThreadFix, and how to use tags for reporting as well as for risk prioritization.

December 18, 2020

• Application security
• ThreadFix®

Video

Introduction to ThreadFix® Tagging Part 2

In this video we will talk about how to apply tags to vulnerabilities and vulnerability comments, and how these tags can be used to improve your remediation workflow as well as support compliance initiatives.

December 18, 2020

• Compliance
• ThreadFix®

Video

ThreadFix® Filters Tutorial

Filters are a powerful capability in ThreadFix® that are used extensively in our reporting, as well as for configuring policies. In this video, we will look at how to create filters, and some of the ways they can be used to create customized views for vulnerability analysis and reporting.

December 18, 2020

• Application security
• ThreadFix®

Video

ThreadFix® Policies Tutorial

In this video we will talk about the different kinds of policies and how they can be used to support your security efforts. The four different kinds of policies are: Filter policies, Pass Criteria policies, Defect Reporter policies, and Time to Remediate policies.

December 18, 2020

• Application security
• ThreadFix®

Video

ThreadFix® Remote Provider Tutorial

In this video, we’ll discuss how remote providers can be used to automate and ease the ingestion of vulnerability data into ThreadFix®.

December 18, 2020

• Application security
• ThreadFix®