Software company JFrog Ltd, known for the JFrog DevOps Platform, has announced new functionalities for its application security SCA tool JFrog Xray. JFrog Xray has been updated with integrations with ServiceNow’s Lightstep Incident Response and Spoke, a suite of products for IT service management.
The JFrog-ServiceNow integration includes a comprehensive software composition analysis (SCA) tool that undertakes fast real-time monitoring of security vulnerabilities and compliance issues. It is designed to work across distributed teams and quickly alert teams to deal with issues in their early stages. This is in order to enable a quick and effective response from organizations, which may need to pull in team members remotely from various locations and departments. It works with ServiceNow’s Lightweight Incident Response, enhancing and broadening its functionality. When using ServiceNow’s Spoke with JFrog Xray, IT operations staff also have access to streamlined reporting, build scanning, and options for exceptions and custom items. It also automates certain workflows to automatically flag compliance issues when it comes to the use of open-source elements.
The main selling point of this integrated solution, dubbed ‘ServiceOps’ by the company, is that it offers an easy-to-use single-view platform that integrates with the workflows of the various roles that all have a part to play in addressing a security incident: IT sysadmins, security specialists, DevOps, site reliability engineers, and other relevant departments.
In this way, IT teams can pre-emptively address security issues before they become critical. JFrog CEO Shlomi Ben Haim claims that this kind of collaboration is necessary to effectively secure software supply chains “at the speed of business.” The end result should be a faster and more coordinated security process across the entire software supply chain and development cycle, making it more efficient and cost-effective for clients.
To read the original news article, click here.
Please rate this post
AI Optimization Disruptive Researcher – Chief Development Officer and CoFounder at AccelOne – Blockchain Certified Developer – Autonomous Cars Engineer – Industrial Engineer – McLaren Fan
My Tech journey started 38 years ago with a Yamaha CX5M Computer / Synth, and since then, I have had a nonstop career adding experiences in several industries and technologies. I am an AI researcher and Ph.D. student and the Chief Development Officer of AccelOne. I lead a team of passionate talent in software engineering services, which are delivered from LA to the US. I have a strong technical background with more than three decades of experience in complex project and team management in various areas, including product design and development in Entertainment, eCommerce, Retail, Logistics, Business Intelligence, and Financial Services. I was CTO of Axigma Technologies, managing mobile business and consumer development projects for brands, including The Marketing Store and C9W. I founded the computer training institute IEC, which provided training services in several different programming languages and design and animation tools. In 2005 I founded Routeck, a development software company devoted to special projects (such as open-source firmware programming), credit card reconciliation, and specific products for retail. I was Development Manager at Infinite Corporation, managing their iSeries and Web products, a former Senior Software Engineer at COTO, and a Senior Web Applications Engineer at HSBC.