Conf42 DevSecOps 2021 - Online

December 02 2021

Subscribe Watch Premiere Watch all talks Sponsors

Other editions:

2022 2023 2024 2025

Schedule

Event	Time	Location
Premiere Show introducing all talks and sponsors		Livestream
Keynote: Building our own custom Code Insight tool at Form3 Adelina Simion Technology Evangelist at Form3		Livestream
Keynote: Using Infra-as-code, not Jira tickets to pass security and compliance audits Travis Gary IT Director at Teleport		Livestream
Keynote: Minimizing the Blast Radius of a Cloud Breach Josh Stella CEO & CTO at Fugue		Livestream
All 25 talks available on demand Pick and choose what order to watch things in		Subscribe

Keynotes

Building our own custom Code Insight tool at Form3

Form3 are on a journey in scaling up - we are expanding our codebase and our engineering teams as fast as we can! In this talk, we present Code Insight, our tool for scanning our code for vulnerabilities: * First, we introduce how we work and deliver code at Form3 to set the scene of our DevSecOps practices. * Then, we move on to discuss what the requirements of Code Insight to fit our...

Adelina Simion

Form3

Ross McFarlane

Form3

Using Infra-as-code, not Jira tickets to pass security and compliance audits

Jira tickets are often seen as a necessary evil in order to satisfy compliance audits however infrastructure-as-code can replace tickets while providing real security benefits. Learn how Teleport utilizes Terraform to make developers, auditors and the security team happy!

Travis Gary

Teleport

Minimizing the Blast Radius of a Cloud Breach

Today’s cloud attacks don’t exploit a single misconfiguration, but rather a series of them. Josh will walk through a process for understanding the blast radius of potential security events in your environment, and steps you can take to prevent minor ones from becoming catastrophic breaches. The recent Twitch breach may have begun with a lone server misconfiguration, but it's blast radius...

Josh Stella

Fugue

TRACKS:

testing tools k8s pipelines lessons learned

Track: testing

Security testing for Terraform templates

Pawel Piwosz

EPAM Systems

Automatic serverless security testing: Delivering secure apps continuously

Tal Melamed

Contrast Security

Track: tools

Software Composition Analysis 101: Knowing what’s inside your apps

Magno Logan

Trend Micro

Compliance As Code with Cloud Custodian

Ismael Hommani

Wescale

Tanguy Combe

Wescale

Centralized Policy Management at Scale

Noaa Barki

Datree

Shimon Tolts

Datree

PIACERE - DevSecOps automated

Radoslaw Piliszek

7bulls.com

Improve the identification of vulnerabilities in your project with just few commands

Filipi Pires

Senhasegura

Track: k8s

A Deep Dive Into Kubernetes Schema Validation

Eyar Zilberman

Datree

Securing and hardening containers hosts

Mathieu Tortuyaux

Microsoft

Sayan Chowdhury

Microsoft

Manage secrets across cloud on Kubernetes

Jhonnatan Gil Chaves

AppGate

Track: pipelines

Stay ahead of the game: automate your threat hunting workflows

Christopher Van Der Made

Cisco

Securing Your Pipes with a TACO

Peter Maddison

Xodiac

Container Scanning: Run Fast and Stay Safe

Rob Richardson

Cyral

Track: lessons learned

The Quick Wins of DevSecOps

Sven Ruppert

JFrog

From Infrastructure as Code to Environment as Code: Challenges scaling IaC and how to resolve them

Adarsh Shah

CompuZest

Lessons Learned from Writing Thousands of Lines of IaC

Eran Bibi

Firefly

Patterns for Encrypting Data at Rest in Cloud-native Applications

Senthil Raja Chermapandian

Ericsson

The Journey From DevOps to Cloud Engineering

Matty Stratton

Pulumi

Overcoming IoT Security Threats from the Start

Jonathan Williams

Twilio IoT

Controlled Software as a Transversal Matter: Every Software Released Automatically Complies with Control Standards

Manuel Schuller

Secrets-management: challenges from code to cloud

Jeroen Willemsen

Xebia

How to keep your startup’s cloud secure when your security team is just you

Ryder Damen

Indeni Cloudrail

Gold sponsors

Silver sponsors

Media partners

Awesome tech events for

Priority access to all content

Video hallway track

Community chat

Exclusive promotions and giveaways

Email address

First Name

Last Name

Company

Job Title

Phone Number

Country