Blog for DevSecOps teams

Strategies, tips and stories for transforming your security operations, product development and compliance management.

Unencrypted S3 Buckets Containing CloudTrail Logs
Interrogate Your AWS Environments

Interrogate a CloudFront Distribution Network (CDN)
Interrogate Your AWS Environments

S3 Buckets Granted Full Access to Someone Other Than Account Owner
Interrogate Your AWS Environments

Internal S3 Buckets Exposed via Public EC2 Instances
Interrogate Your AWS Environments

Internal S3 Buckets Exposed to the Public
Interrogate Your AWS Environments

AWS Cross-Account Trust Graphing
Interrogate Your AWS Environments

AWS Query for Unvalidated External Trust
Interrogate Your AWS Environments

AWS Query Access Permissions within an IAM Policy
Interrogate Your AWS Environments

Monitoring Federated Access to AWS Accounts
Interrogate Your AWS Environments

J1 Query to Expose (Un)approved AMIs
Interrogate Your AWS Environments

People, Process, Technology: The Missing Factor

2020 JupiterOne Year in Review – Bigger, Better, Easier

JupiterOne Visual Query Builder
Video Overview (4 minutes)

Cyber Asset Relationships Matter – Part Two
Analyzing Relationship Mapping

`deferred-maintenance` CLI tool

Cyber Asset Relationships Matter – Part One

Cyber Assets – The Future of Cybersecurity

Sampling Based Security – An Outdated Approach

SOC 2 Compliance on a Shoestring Budget

JupiterOne Announces $19M A Round

Finding risky OAuth scopes in G Suite

Add Context to User Access Logging with JumpCloud

Why Do Compliance as Code

What is Asset Discovery?

Building a Streamlined Cyber Risk Assessment Process using Jira and JupiterOne

JupiterOne Adds Netflix Integration

Quickly Spot Desk Top Vulnerabilities

Enabling Intelligent Security Remediation

Reduce Noise when Analyzing User MFA Status with Graph Queries

The Devil’s in the (Meta) Details

JupiterOne & Reddit at RSA

To Secure is to Love

Building Compliance Evidence Download with a Functional Pipeline

Vuls & Gitleaks Integrations

2019 Year in Review

Breadth vs Depth

Out of the Box Insights

Finding Security Budget

The Path to SOC 2 Compliance

Introducing Insights Dashboards

Keeping Security Up to the Speed of DevOps

Map Repository Dependency Relationships in Graph

Yahoo Breach Settlement

Capital One Breach: Is your AWS environment just as susceptible?

JupiterOne Recognized by 451 Research as a ‘451 Firestarter’

Overcoming the Data Navigation Challenge

Comparing HIPAA and GDPR

Building an Effective Security Program

Bug Bounties Make Sense. Here’s Why.

No Time for SecOps

How JupiterOne simplifies security and compliance operations with Amazon Neptune

We Turned Off AWS Config

JupiterOne Compliance Dashboard

Solving for Endpoint Compliance in a Cloud-First Landscape

Making Security a Feature of your SaaS Tool

Transforming Security Operations

Top 8 Components of a 2019 Security Awareness Program

New Integrations: G Suite and Veracode

Remediating Security Vulnerabilities and Threats

6 Foundational Tips for AWS Security

Cyber Security Layers

Healthcare Cybersecurity Frameworks

Three Dimensional Security

SecOps: An Exercise in Time Management

Priming your security operations for a productive 2019

What is NIST CSF?

Compliance Doesn’t Matter

Security Should Fuel Business Growth. Why Doesn’t It?

4 Things Every Business Should Do after a Public Data Breach

What Does Digital Transformation Mean for Security and Compliance?

Cybersecurity Lessons from Johnny English

Finding a cure to the cyber breach pandemic – JupiterOne is here

What is SOC 2 Compliance?

Data-Centric, Zero-Trust Security

Introducing the LifeOmic Top Ten

Perhaps It’s Time We Stop Blaming the Users

Are We Doomed in the Cyber-pandemic? My View on the State of Cybersecurity