Agentic AI can help threat intelligence teams move faster across collection, enrichment, correlation, and drafting while keeping critical judgments in human hands....
Agentic AI can help SecOps teams investigate alerts by gathering context, correlating signals, and surfacing evidence-backed recommendations, without handing over...
Agentic AI can help threat intelligence teams move faster across collection, enrichment, correlation, and drafting while keeping critical judgments in human hands. This Refcard covers the essentials of building agent-supported intelligence workflows, including how to preserve provenance, evaluate source reliability and confidence, produce analyst-ready outputs, and apply review and operating guardrails. You’ll also learn how to measure whether agent-supported intelligence is timely, relevant, and actionable.
Agentic AI can help SecOps teams investigate alerts by gathering context, correlating signals, and surfacing evidence-backed recommendations, without handing over control of response actions. This Refcard walks through how to build a bounded alert triage agent, from defining the use case and mapping inputs to configuring read-only tools, guardrails, and human escalation. You'll also learn how to structure analyst-ready outputs and test the workflow against sample alerts before piloting it in production.
With DevSecOps, teams can elevate their security standards while following DevOps principles. In this Refcard, readers will learn how to build (or improve) their DevSecOps program, including identifying key security risks in the software delivery lifecycle, applying core principles for secure development and deployment, and integrating practical controls and automation strategies that scale with modern pipelines. Whether you're just starting or looking to mature your program, this Refcard provides actionable insights for embedding security into your DevOps culture and workflows.
Code review remains one of the most important quality gates in software development, even as automation and AI tools take on more of the surrounding workflow. This Refcard covers a practical guide to modern code review practices, including how to prepare reviewable pull requests, use automated checks effectively, apply human judgment to quality and risk, and incorporate AI assistance without handing off accountability. Readers will learn how to structure code reviews around clear context, actionable feedback, security awareness, maintainability, and process health so teams can move faster while keeping the right level of scrutiny before code reaches production.
The reality of modern application design means that when an unexpected issue occurs, the ability to find the root cause can be difficult. This is where the concept of centralized log management can provide a great deal of assistance. This Refcard teaches you the basic flow of a log management process, provides a comprehensive checklist of questions to consider when evaluating log management solutions, advises you on what you should and should not log, and covers advanced functionality for log management.
Covering the essentials of security in Kubernetes environments, this Refcard addresses the three primary areas of attack within a Kubernetes cluster. Security concepts range from the software supply chain — images, build systems, and container registry security — to Kubernetes infrastructure, as well as deploy-time and runtime security. Key examples like threat vectors, security measures, and vulnerability and violation types within each section will help you continue strengthening your Kubernetes environment security as you automate and scale the deployment and management of your cloud-native applications.
Building an AI agent prototype is one thing; running it safely and reliably in production is another. This Refcard walks engineers and technical leaders through the architecture, governance, security, evaluation, deployment, and monitoring decisions required to move AI agents from demo to production. Explore practical guidance for managing state and memory, enforcing guardrails, building eval gates, handling secrets and model configuration, instrumenting agent behavior, controlling costs, and closing the feedback loop after every release.
Given the rise in identity-focused breaches and the continuously growing number of identities, identity and access management (IAM) has emerged as a cornerstone for safeguarding enterprise systems. By orchestrating secure authorization and authentication, IAM serves as the digital gatekeeper, granting controlled access to diverse resources — from on-premises databases to cloud-based applications. In this Refcard, we delve deep into IAM's crucial role in modern cybersecurity. We outline the primary functions and principles that underpin IAM, highlight its significance, address common challenges faced by engineering teams, and focus on the core practices.
Threat modeling is a crucial component of the secure-by-design guiding principles. This Refcard provides the fundamentals of threat modeling, core practices for secure implementation, and key elements of conducting successful threat model reviews. Exploring the significance of modern tools for automating and streamlining threat modeling processes, we will review how to improve the accuracy of findings and facilitate integration and collaboration among software and security teams throughout the SDLC.
Advancements in AI and automation have paved the way toward agentic automation. Integrating advanced AI techniques, agentic automation enables autonomous agents to handle complex, unstructured tasks with minimal human intervention. In this Refcard, you will learn about the key components of AI agents, design principles for building intelligent agents, and practical applications of agentic automation — all demonstrated via a real-world use case.
Securing software supply chains has become a first-class consideration — along with coding and CI/CD pipelines — when developing a software product. Far too many vulnerabilities have been subliminally introduced into software products and resulted in catastrophic breaches for us as diligent developers to treat supply chain security as an afterthought. The core practices and principles outlined in this Refcard provide a foundation for creating secure supply chains that produce deliverables and products that others can trust.
Enterprises are rapidly adopting cloud-native architectures and design patterns to help deliver business values faster, improve user experience, maintain a faster pace of innovation, and ensure high availability and scalability of their products. Cloud-native applications leverage modern practices like microservices architecture, containerization, DevOps, Infrastructure as Code, and automated CI/CD processes. This Refcard walks through the critical challenges of cloud-native application security, demonstrates how to build security into the CI/CD pipeline, and introduces the core patterns and anti-patterns of cloud-native application security.
