From DevOps to DevSecOps In 4 Simple Steps
Kiran Kamity
Founder & CEO at Deepfactor | Host @ "Next-Gen AppSec Series" | TEDx Speaker
Continuous Integration lets you build fast.
Continuous Testing lets you test fast.
Continuous Delivery lets you deploy fast.
Great engineering organizations don’t just move fast….they move fast with confidence!
DeepFactor helps your team go fast with confidence!
DeepFactor is the continuous pre-production monitoring platform for developers. It combines security, performance and behavior monitoring into one simple solution, seamlessly integrated into the DevOps pipeline. DeepFactor is available as a self-managed version today (install DeepFactor portal on AWS or VMware), with a SaaS version coming soon. Here’s how you can setup DeepFactor for your software development team.
The 4 i’s: Install, Instrument, Integrate, Insights
Install
You can start with our free Community Edition, using either
- AWS Cloud Formation Template to setup your DeepFactor portal on AWS, or
- OVA to set up the portal on VMware ESXi.
Instrument
The next step is to instrument your applications. You can do so using
- The command line workflow
- The step-by-step-wizard.
You don’t need to make any code changes to instrument an application. There are two options for instrumentation depending on the type of app:
- For apps running on Docker containers: Run our ‘docker build’ command to simply add a file (libdf.so) to the container.
- For traditional, non-containerized apps: Use the DeepFactor launcher and start your app with it.
Integrate
You can integrate DeepFactor with Jenkins, Slack, and Jira.This enables your builds to automatically be instrumented with DeepFactor, insights to be logged into your bug tracking platform of choice, and updates to automatically be sent to your Slack channels. DeepFactor comes with out of box integrations with all these platforms. We are working on adding more out of the box integrations at a rapid pace. If you’d like us to integrate with a platform of your choice, please let us know. We’ll get right on it!
Insights
When you instrument your app with DeepFactor, DeepFactor becomes a ‘fly-in-the-wall’, and watches over 170 different parameters of your application’s behavior. It then sends this behavior telemetry to the DeepFactor portal, where insights are analyzed, and anomalies are detected.
How can your team can get started with DeepFactor?
Here are 3 easy ways your team can check DeepFactor out:
- DeepFactor Community Edition: DeepFactor is free for teams with fewer than 10 developers. You can register for the community edition on our website.
- DeepFactor Live Sandbox: You can start playing with DeepFactor on our live Sandbox. The sandbox requires no registration and provides an environment with monitored applications.
- DeepFactor for Open Source Projects: DeepFactor is completely free for non-commercial open source projects. If you are a contributor of such a project, you can register on our website to start using DeepFactor on your project.