Evidence as an Input
Scan results aren’t the end — they’re the input to the next control. Evidence must be tied to fingerprints so it’s reusable.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.
Multi-domain (multi-san) certificates and better error messages
We shipped some big updates this week!
From Downtime to Stability: The Role of Managed IT in Modern Operations
Operational downtime has become one of the most expensive risks modern organizations face. A single system failure can halt workflows, expose security gaps, and drain revenue within hours. And as businesses in Long Beach & beyond grow more dependent on digital systems, the margin for IT failure keeps shrinking. Yet many operations teams still rely on reactive IT models, fixing issues only after they cause disruption.
How to Protect a Server from DDoS Attacks: 10 Practical Ways That Actually Work
DDoS attacks are no longer exotic weapons used only against banks, governments, or global tech giants. Today, a small online store, a SaaS startup, or even a personal blog running on a VPS can become a target. The barrier to launching an attack has dropped dramatically, while the damage such attacks can cause has only grown. Any server connected to the internet is exposed by default - the only real question is how prepared it is.
Why Release Control Takes Weeks
The industry standard for release control is painfully manual: long-form policy documents, ServiceNow forms, human approvals, meetings, and tickets that take days or even weeks to close. In this video, Mike Long (CEO & Co-founder, Kosli) explains the difference between manual release control and an automated, zero-trust model where evidence is collected automatically, provenance identifies the artifact, and approvals can be fully codified.
Evidence as an Input
Evidence isn’t something you produce at the end — it’s something every control generates for the next one. In this video, Mike Long (CEO & Co-founder, Kosli) explains how vulnerability scans produce evidence tied to the artifact fingerprint and the policy file used, and how that evidence becomes an input to downstream controls like release approvals. This is the core of reusable, continuous compliance.
How Do We Trust the Evidence?
Evidence only matters if you can trust it. And you can only trust it if the artifact behind that evidence has a verifiable, untamperable origin. In this video, Mike Long (CEO & Co-founder, Kosli) explains why artifact binary provenance is the foundation of trustworthy evidence, and why zero-trust delivery collapses without it. Video Timeline.
ITAM: Your Unexpected First Line of Cyber Threat Defense
When the conversation turns to cybersecurity, people often think of firewalls, intrusion detection systems or state-of-the-art endpoint protection. Yet, beneath these sophisticated shields is an essential (and often unsung) foundation: robust IT Asset Management (ITAM). For CIOs guiding mid-sized and enterprise organizations through an increasingly perilous digital landscape, ITAM offers not just operational clarity, but a powerful first line of cyber threat defense.
Discover how to build AI-augmented applications with enterprise-grade security
IT leaders want AI that moves the needle without blowing up risk, cost, or changing control. Your teams need a path to productize AI features on top of existing apps, connect safely to external models, and satisfy audit requirements without slowing delivery. Those are the core buying criteria we hear from IT middle management: buy over build, predictable outcomes, and a strong compliance posture.
Best Certificate Monitoring Solutions With Slack/Teams Integration: The Complete Guide
SSL certificates expire silently. When they do, websites instantly break. Users see warnings. Traffic drops. Security trust is damaged. This is why businesses now rely on certificate monitoring solutions that send alerts before a certificate expires. A growing number of teams want these alerts directly inside Slack or Microsoft Teams, because that’s where their operations already work every day.