Skip to main content

📣 Submit your proposal: OpenSSF Community Days: Japan | India | Europe

Tag

livestream

Livestream: All About SaaS Security

By

Join us for a live stream with Aparna Hinge, Principal Product Manager at CheckRed, as she shares her extensive experience in securing SaaS applications. With over 15 years in building secure software, including 10 years in groundbreaking security research and product design, Aparna brings a wealth of knowledge to the table. As a Certified Information Systems Auditor (CISA), she possesses deep expertise in technical areas coupled with governance and policy requirements. This allows her to navigate the complexities of SaaS security with aplomb!

In this captivating session, Aparna will pull back the curtain on the often-hidden world of SaaS security, sharing firsthand accounts of the challenges she’s conquered and the intricate technical puzzles she’s solved while architecting robust security for the applications we rely on every day. Discover the nuances of safeguarding SaaS environments and glean invaluable wisdom from a true industry veteran.

CheckRed’s comprehensive security posture management (SSPM + CSPM) approach delivers a streamlined, centralized cloud security solution, providing comprehensive coverage across major cloud providers like AWS, Azure, GCP, and Linode, as well as over 50 widely used SaaS applications, including Salesforce, Microsoft 365, ServiceNow, and Okta.

Remember to join us live on Thu, Feb 6th, 2025!

Building Security Tooling: Trials and Triumphs

By

Join Barun Acharya, who is many things ― a CNCF Ambassador,  maintainer for KubeArmor, and works as a Software Engineer at Accuknox, as he gives us the inside story of what it is like to build and maintain security tooling. In his conversation, he will be explaining the common pitfalls one can expect when designing security tooling and the difficult decisions developer habits put them in.

If you’ve wondered how to strike a balance between building opinionated tooling that sets out to accomplish something versus being an open platform for developers, this live stream is certain to spark your interest. Join us to learn more about security, tooling, and the challenges that surround security awareness.

Policy, Security, and the Software Supply Chain

By

Join us for a live stream with security expert Abhisek Datta! Abhisek has over a decade of experience in platform & security engineering, DevSecOps, and building secure B2B SaaS platforms.

In this session, Abhisek will discuss the critical intersection of policy, security, and the modern software supply chain. He’ll also demonstrate vet, an open-source tool he co-developed to identify risks in open source dependencies, helping engineering and security teams leverage DevSecOps and policy-as-code practices to build more secure software.

Don’t miss this opportunity to learn:

  • The evolving landscape of software supply chain security.
  • How to identify and mitigate risks in open source dependencies.
  • Practical strategies for integrating security into your DevSecOps workflow.
  • A live demo of vet, a new tool for securing software supply chains.
  • The impact of the work OpenSSF has been doing within the larger security community.

Mark your calendars and join the live stream!

This event is being hosted in the run up to SOSS Community Day, India, co-located with KubeCon + CloudNativeCon India 2024. Please remember to register for the event here.