The service catalog is an indispensable component of a team’s software development infrastructure. Anything you need to know about your microservice architecture - whether it is knowing who owns a particular service or what another service’s dependencies are - lives inside this repository. Its potential, however, is not limited to being a storehouse for all the data about your microservices.

It is no secret that companies are shifting large infrastructures to the cloud. With more and more companies undergoing the digital transformation of their services, we have been witnessing cloud adoption as a software growth and maintenance strategy for a few years now. The nature of this movement has changed over time, so it is important to ask yourself what cloud adoption looks like today.

With AWS re:Invent right around the corner, infrastructure has been top of mind at Cortex. Earlier this year, we launched our revolutionary Resource Catalog, which integrates with AWS accounts to automatically ingest all infrastructure components, from s3 buckets to lambdas. Through this process, Cortex allows you to track everything in a single place, while augmenting the information that already exists in AWS. The Resource Catalog surfaces live information about your infrastructure assets.

Vulnerabilities are part and parcel of the software development life cycle. If left untreated, they can expose your application to malicious attacks, which can be detrimental to its functioning and reliability. To avoid severe damage and complications that arise from having the vulnerabilities exposed, it is good practice to set up a vulnerability management system. Vulnerability management is a practice that teams should integrate into the larger development process as it helps keep the software secure.

Mend is an automated vulnerability scanning tool that helps teams detect and resolve issues quickly. Mend can discover outdated packages and tell you if you’re relying on tools with known issues. Then, through automated remediation, Mend creates pull requests for developers with specific guidance on resolving those issues. Mend conducts static code analysis as well as package and dependency management analysis to identify weaknesses.

Cortex is a developer portal that helps engineering teams create a culture of reliability and ownership. Its service and resource catalogs provide a single-pane-of-glass into critical information about their ownership, documentation, dependencies and third party integration data.

Imagine you’re part of a software development team that’s working on an important new project. Everyone is excited about the work, but you’re running into trouble. The work wasn’t clearly divided up, so some of the engineers unintentionally did overlapping work. Meanwhile, neither the PM nor the engineers realized that they would eventually need sign-off from an external stakeholder, who doesn’t agree with all of the project requirements.

For software development teams to make meaningful progress, they must invest in efficient monitoring, reporting practices, and tooling. This is because only by keeping track of select metrics, such as those pertaining to application performance, will you know whether you are on the right track. Without knowledge of whether the software is functioning and performing as it is supposed to, there is no way of knowing what, if any, changes need to be made.