Bret is joined by Willem Delbare and Roeland Delrue to discuss Aikido, a security tool consolidation platform designed specifically for smaller teams and solo DevOps practitioners. The discussion explores how Aikido addresses the growing challenges of software supply chain security by bringing together various security tools - from CVE scanning to cloud API analysis - under a single, manageable portal. Unlike enterprise-focused solutions, Aikido targets the needs of smaller teams and individual DevOps engineers who often juggle multiple responsibilities. During the episode, they demonstrate Aikido's capabilities using Bret's sample GitHub organization, and show how teams can implement comprehensive security measures without managing multiple separate tools.Be sure to check out the <a href="https://www.youtube.com/live/73EGsZlqlwk?si=zQfWxX8VS9bRGgwG&t=226">live recording</a> of the complete show from December 5, 2024 on YouTube (Stream 281).★Topics★<a href="https://aikido.dev">Aikido website</a><a href="https://bsky.app/profile/aikidosecurity.bsky.social">Aikido on Bluesky</a><a href="https://www.linkedin.com/company/aikido-security">Aikido on LinkedIn</a>Creators & Guests
<ul>
 <li><a href="https://podcast.bretfisher.com/people/cristi-cotovan">Cristi Cotovan</a> - Editor</li>
 <li><a href="https://podcast.bretfisher.com/people/beth-fisher">Beth Fisher</a> - Producer</li>
 <li><a href="https://podcast.bretfisher.com/people/bret-fisher">Bret Fisher</a> - Host</li>
 <li><a href="https://podcast.bretfisher.com/people/willem-delbare">Willem Delbare</a> - Guest</li>
 <li><a href="https://podcast.bretfisher.com/people/roeland-delrue">Roeland Delrue</a> - Guest</li>
</ul>
<ul><li>(00:00) - Intro</li>
<li>(06:20) - Aikido Origin Story</li>
<li>(10:32) - What Does AutoFix Mean?</li>
<li>(13:18) - Security Automation and Developers</li>
<li>(21:32) - Lessons from Onboarding Customers</li>
<li>(23:10) - Reducing Noise and Alert Fatigue with Aikido</li>
<li>(27:30) - Aikido in the CI/CD Process</li>
<li>(31:26) - AI Security Integration</li>
<li>(32:24) - GitHub Actions and Dependencies as Attack Vector</li>
<li>(39:20) - Dependencies in Programming Languages</li>
<li>(41:30) - Infrastructure as Code and Cloud Security</li>
<li>(48:17) - Runtime Protection with Aikido Zen</li>
<li>(54:25) - Agent Involvement in Scanning</li>
<li>(57:54) - Tools to Use Alongside Aikido</li>
<li>(01:01:16) - Getting Started with Aikido</li>
</ul>
You can also support my free material by subscribing to my <a href="https://www.youtube.com/@BretFisher">YouTube</a> channel and my weekly newsletter at <a href="https://bret.news/">bret.news</a>!Grab the best coupons for my <a href="https://www.bretfisher.com/courses">Docker and Kubernetes courses</a>.Join my cloud native DevOps community <a href="https://devops.fan/">on Discord</a>.Grab some merch at <a href="https://bretfisher.myspreadshop.com/">Bret's Loot Box</a>Homepage <a href="https://bretfisher.com/">bretfisher.com</a>

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

Aikido: Is a Single DevSecOps Tool Possible?

DevOps and Docker Talk: Cloud Native Interviews and Tooling

AI Chapters

AI Insights

Reviews