Sponsored Keynote: Total Clarity on Your Application Security

Open Clarity is an open source suite effort that aims at addressing the entire cloud security and application security stack, and making it practical and usable for developers, cloud architects, and security teams alike.

• Security is key for modern apps
• Application security needs to be approached across the entire stack and software supply chain
• Scanners are essential but need to be deployed and orchestrated at scale
• Good dashboards and UI are necessary to convey a clear and convincing picture of application security posture
• Open Clarity is an open source suite effort that aims at addressing the entire cloud security and application security stack
• VM Clarity is a new project that offers VM agentless scanning at scale
• More open source tools are needed to address the totality of the application security picture

The speaker used a blurry image to illustrate the need for clarity in application security. By breaking down the elements in the picture, it became clear that the young lady's purse was being stolen. Similarly, application security needs to be approached in its totality to understand what's going on with our application security.

Cloud Architects and Application Security teams stand, on a daily basis, in front of difficult questions: Where is my application vulnerable? Which of my assets are at risk? Where can I be hacked? What are the most critical security flaws in my applications that put my CPU, application logic, and data assets at immediate risk?The industry and the open source community need a suite of tools that can be used to understand those risks across the entirety of an application development, deployment, and production runtime, across on-premises and cloud resources, over monolithic as well as cloud native architectures.We will share latest updates on Open Clarity, an open source suite effort that aims at addressing the entire cloud security and application security stack, and making it practical and useable for developers, cloud architects, and security teams alike.