Bringing OpenAI GPT capabilities to government teams will be a game changer for our nation.

We are beyond excited to see over 420 teams on Ask Sage after only 2 weeks being online!

In this video, we answer some of your most asked questions, including:
- The limitations of the free account
- OpenAI latency
- Tokens & learn token limits
- Giving you hint on your prompt
- Being careful about Hallucinations
- Ingestion insights
- Datasets & source
- Real time API

Check out this video about Ask Sage data ingestion: https://youtu.be/kOSwMVowQVU

If you want to join us on Discord, join here: https://discord.gg/upxuAdNvjY

If you have questions: support@asksage.ai

#GPT #Davinci #openai

24 3

Chaos Engineering is about experimenting on a system to build confidence in the system's capability to withstand turbulent conditions in production.

It is essential to enable you to move at the pace of relevance, embrace the concepts of Cattle vs Pets and ephemeral architecture.

Ability to tolerate failures while still ensuring adequate quality of service—often generalized as resiliency—is typically specified as a requirement.
Chaos engineering can be used to achieve resilience against infrastructure failures, network failures, and application failures.

In this video, learn about its history but more importantly, why it matters, why it is a must for all systems in the universe and how to implement with tangible solutions such as Chaos Monkey, Simian Army and Gremlin.

18 1

Finally understand why Software Bill of Materials is essential for your software visibility, transparency, security and even integrity.

An SBOM is a complete inventory of a codebase including the opensource components, the license and version information for those components, and whether there are any known vulnerabilities in those components.

The SBOM work has advanced since 2018 as a collaborative community effort, driven by the National Telecommunications and Information Administration's (NTIA) multistakeholder process.

An SBOM provides those who produce, purchase, and operate software with information that enhances their understanding of the supply chain, which enables multiple benefits, most notably the potential to track known and newly emerged vulnerabilities and risks.

Find out what you must do to integrate SBOM into your DevSecOps process and get it done.

33 2

So you want to move at the pace of relevance, enable your teams to instantiate your applications, DevSecOps Platform and even your entire Infrastructure with a push-button deployment?

Finally understand the 5 principles of GitOps, its various benefits and implementations with products like Harness with Argo CD and Weaveworks with Flux.

Your Git repo becomes your source of truth, your crown jewel.

The "Infrastructure as Code" concept is a critical DevSecOps ingredient to ensure that production environments do not drift from development/testing environments.
Changes should only be made in source code and redeployed by the CI/CD pipeline.
- No drift between environments, whether classified/disconnected/Cloud/on-premise,
- Immutable,
- Replicable,
- Automated,
- No human in production environments: reduces attack surface (disable SSH etc.), insider threat and configuration drifts,

Based on Infrastructure as Code concepts, GitOps makes Git the single source of truth of the desired state of your Infrastructure, Platform and Applications.

35 9

Are you finally moving to microservice and are you struggling to decouple your teams so they can release at their own pace of relevance?

If so, look no further and check out our video on why a Service Mesh is a must to streamline your software delivery and remove your coordination’s bottlenecks!

Service Meshes like #Istio, uses #Envoy to inject it as a sidecar container thanks to #Kubernetes.

Service Meshes bring tremendous capabilities such as:
- API Management, service discovery, authentication…
- Dynamic request routing for A/B testing, gradual rollouts, canary releases, resilience, observability, retries, circuit breakers and fault injection
- Layer 7 Load balancing
- Zero Trust thanks to mTLS tunnel injection with East/West Traffic Whitelisting, access control and ABAC
- mTLS encryption by default, key management, etc…

28 3

When YOU finally understand what Zero Trust is!

Find out about the 3 pillars of Zero Trust (often bloated or forgotten) with:
- Device enforcement: including, patch levels, endpoint protection, MDM etc.
- Strong identities: for both Person Entities (PE) and Non-Person Entities
- Data-centricity: labeling data down to the cell level

Leverage “Software Defined Perimeter” (SDP) (not just SDN) using mTLS tunneling with granular micro-segmentation using the “Segment of One” concept
Leverage Service Mesh to prevent lateral movement by enforcing east/west traffic down to the container level

In this video, we walk you through the largest implementation of Zero trust in DoD, with the Department of the Air Force program, the Cloud Native Access Point (CNAP).

And you, how many times do you see companies alleging they have an end to end Zero Trust solution only to find a basic identity-aware proxy?

Please share and comment!

69 4

Let's end the DoD Valley of Death!

1. Let's ensure DevSecOps is used from day 1 by R&D software intensive teams,

2. Let's finally become "smart money" by having government dedicated "transition managers" who will be responsible for introducing DoD material leaders and PMs to SBIR phase 2 projects.

Let's also take a look at a perfect example delivered by innovative "low-code-no-code" platform, Crowdbotics, that brings tremendous value to our airmen pilots but also potentially to all commercial pilots out there but yet hasn't been leveraged to the fullest extent of DoD's potential, leaving the founding team struggling to find engagements. What a shame!

33 17

Find out how SpaceX can move at the pace of relevance and avoid having 2,000 developers being literally useless!

How modularity and reuse of code streamlined its deployments and how hardware in the loop testing enables SpaceX to update software a day before a launch as opposed to the 1 to 7-year average for F-35s!

Learn more about DevSecOps and why it matters with tangible numbers and how the Department of Defense put #Kubernetes and #Istio on F-16s and U-2 60-year-old jet!

58 10

Looking for the best investments to make your organization able to compete and move at the pace of relevance with baked-in security?

Find out about the 3 Modern Cyber Posture Pillars with "Moving Target Defense", "Zero Trust" and "Continuous Monitoring with Behavior Prevention".

Implement DevSecOps and continuous deliver software to your end-users.

#DevSecOps #Kubernetes #containers #zerotrust

48 0

HELP! I am getting into HOT waters today!

Here is why: Kubernetes is MUST, even if you think it is overkill! That's right! I said it and I mean it!

You may decide (wrongly) to crucify me and claim I am wrong. I'll simply reply you do not have the technical maturity to understand the problem (yet), or, well, you may have a point and surprise me in the comment section!

I make my case here by showing you, step by step, all the key benefits and cybersecurity outcomes you gain by leveraging Kubernetes and its ecosystem such as a Service Mesh.

I believe the benefits of using alternative orchestration stacks, do NOT outweigh those cyber outcomes:
Centralized logs, telemetry, tracing, Zero trust, continuous monitoring, SBOM, provenance and integrity enforcement, and more!

In fact, I believe it is your only chance to enable your organization to move at the pace of relevance.

Please share your thoughts in the comment section!

48 8

Struggling to understand what Kubernetes is about? Why the hype? Why is Kubernetes taking over the world and most organizations on the planet?

Are you trying to invest in yourself and learn a new skill that will pay back 100 fold?

Check out this new video on the benefits of Kubernetes, including a discussion around Cattle vs Pets, ephemeral containers, baked-in security, auto-scaling, modern architecture and even the new certifications from the Cloud Native Computing Foundation (CNCF) with Certified Kubernetes Application Developer (CKAD), Certified Kubernetes Administrator (CKA) and Certified Kubernetes Security Specialist (CKS).

69 9

Wondering about my top 5 DevSecOps Tools of 2022?

Are you trying to find the best return on investment and the best added DevSecOps capabilities for your organization?

Look no further!

Check out my top 5 with GitLab, Weaveworks, Anchore, Tetrate and Traceable.ai !

#devsecops

65 11