Comprehensive software reviews to make better IT decisions
Clarizen-Procore Partnership Spells Relevance
Clarizen and Procore announced a partnership in October that aims to “help construction companies improve agility.” The functional rationale makes sense, but what’s the vendors’ strategic business rationale? Relevance. Project portfolio management (PPM) vendors are continually seeking relevance by making their offerings more applicable to industry verticals, and this partnership makes sense when viewed through that lens.
Angela Bunner, Clarizen’s VP of Solutions Engineering, called the partnership as natural as “Peanut butter and jelly. The mouse and keyboard. Fred Astaire and Ginger Rogers.” We’re tempted to give Angela a hard time about hyperbole, but she’s not far off base.
For 20 years, PPM vendors have been told by investors make their offerings more vertically oriented in order to improve their market relevance. This leads to humorous whiteboard conversations about “Work Breakdown Structures for Healthcare” and “Gantt Charts for Governments.” One unfortunately realistic example might be “Project Intake for Higher Education: Everybody Gets Approved!”
But, for the most part, PPM software isn’t all that vertical. Since construction/engineering is a vertically specialized market, the partnership with Procore gives Clarizen a lot more relevance.
The move also makes sense for Procore, given the portfolio-level dilution that occurs when engineering firms manage some projects, ship resources into projects managed by competing firms, and get pressure to integrate with a single platform for their internal projects. A more generalist PPM solution is, on paper at least, a recognizable solution to a common problem.
The Clarizen-Procore partnership makes sense for both sides. Clarizen gets a measure of relevance in the construction/engineering space, and Procore gets the generalist coverage of a full-featured PPM suite.
In the digital realm, trust is currency. Without robust identity verification, online interactions become a breeding ground for fraud and exploitation.
In the ever-evolving landscape of SaaS Security, one company has quietly forged its path, becoming a beacon of protection for large enterprises grappling with the growing complexity of SaaS applications. This is the story of Adaptive Shield, a rising star in the SaaS Security space, whose journey from a nimble startup to a recognized industry leader is as remarkable as the solutions it offers. Founded in 2019 by cybersecurity veterans Maor Bin and Jony Shlomoff, Adaptive Shield entered the scene with a bold vision: to address the growing blind spot in the SaaS ecosystem regarding enterprise security – including the dangers deriving from misconfigured security controls, lack of management regarding human and non-human identities, interconnected apps, and the detection of threats within these business-critical apps. Recognizing the exponential adoption of SaaS and the inherent risks it posed, the company set out to build a comprehensive shield, not just for individual applications, but for the entire interconnected SaaS ecosystem.
LoginRadius started as a simple social login provider but pivoted to create a comprehensive CIAM platform that now reaches over a billion consumers worldwide. My analyst demo with LoginRadius confirmed what they pride themselves on: delivering a user-friendly platform that simplifies CIAM implementation and management.
Qwiet AI is a San Jose, California-based company that develops an AI-powered application security platform. The company's flagship product, preZero, uses machine learning to automate and accelerate application security testing, enabling developers to identify and remediate vulnerabilities early in the software development lifecycle (SDLC). Qwiet AI was founded in 2016 by a team of experienced cybersecurity professionals with a shared vision of empowering developers to build secure software. The company's mission is to "Prevent the Unpreventable" by providing a comprehensive and AI-driven solution that helps organizations of all sizes secure their applications from the very beginning.
We should start by defining what a secret is. It’s really any piece of confidential information used to authenticate access to sensitive resources. This includes passwords, API keys, encryption keys, SSH keys, and other digital credentials. Many of the organizations I talk to have an application security program with some OWASP checks in the pipeline, some SAST, but rarely SCA or DAST testing. GitGuardian believes secrets detection and remediation is crucial for maintaining security and preventing unauthorized individuals from accessing sensitive information or disrupting critical systems. I agree and believe the value it can bring to an application security program is significant.
Q headlines a bevy of announcements at AWS re:Invent 2023 in Las Vegas that shed more light on the cloud service provider’s AI strategy and where its differentiation from other vendors lies.
This note outlines some tips and tricks that you should be aware of when embarking on the installation and configuration of a Kubernetes cluster. Such an endeavor should only be attempted if the need for an enterprise-grade container orchestration solution is required.
It’s simply not enough today to pit your traditional application security toolkit against today’s advanced threats, especially those attacks that target APIs or mobile platforms. Bolstering your CI/CD pipeline by introducing more advanced and accurate SAST, SCA, IAST, and DAST will most certainly improve your security posture, but the journey does not end there. There are attacks and use cases that need careful consideration for how you approach security. Appdome believes it has those unknown challenges addressed and can significantly improve your application security program with very little effort from your development and security team, a welcome change from solutions that required a good bit of work to introduce problem-free into your code base four years ago.
This post provides a review of Zoom’s 2023 conference, Zoomtopia 2023. Core aspects covered include what major product releases and upgrades Zoom announced at Zoomtopia 2023, and what these announcements mean for Zoom’s market positioning in 2024.