DevSecOps

At Apexon our DevSecOps model is driven by continuous insight traced and generated from prototype-to-production process covering Agile development practice, security, 100% automation and operational practices
The Apexon DevSecOps model is based on a set of principles, practices and technology enablers/accelerators that are readily available

This drives cost savings from day one and evolve with automated services to guarantee saving in resources, tooling and process cost.

DevSecOps Services

Our DevSecOps service offerings

Our DevSecOps service offerings

Continuous Delivery, Integration, Security and Testing

Progressive Delivery, Continuous Monitoring

SRE (Test Automation, Chaos Engineering, Log Analytics)

AWS Security Services
The key tenets of our methodology
THE KEY TENETS OF OUR METHODOLOGY

Orchestrating AWS-cloud tools & services

Enforcing security

Automation to ensure site reliability and availability
of business functions at-all-times

DevSecOps – Scaled Agile Methodology

DevSecOps - Scaled Agile Methodology

Apexon utilizes the following AWS Services to help clients adopt and automate DevSecOps on AWS Cloud:

AWS Code Pipeline
AWS Code Pipeline
AWS Lambda
AWS Lambda
AWS SNS / AWS SES /mailhog / slack integration
AWS SNS / AWS SES /mailhog / slack integration
SonarQube (SAST)
SonarQube (SAST)
OWASP ZAP (DAST)
OWASP ZAP (DAST)
AWS CloudWatch Events
AWS CloudWatch Events
AWS CloudTrail
AWS CloudTrail
AWS IAM
AWS IAM
AWS Config
AWS Config
Static Analysis of Container using CLAIR
Static Analysis of Container using CLAIR
Sysdig’s Falco for container threat detections
Sysdig’s Falco for container threat detections
Talisman
Talisman (Tool that installs a hook to your repository to ensure that potential secrets or sensitive information do not leave the developer’s workstation)
OWASP Dependency Check (Software Composition Analysis Tool)
OWASP Dependency Check (Software Composition Analysis Tool)

Apexon offers the following DevOps Accelerators for adopting DevSecOps on AWS Cloud:

Enterprise Continuous Delivery of Microservics
Enterprise Continuous
Delivery of Microservics

AWS EC2
Kubernetes via Kubeadm
Terraform
Prometheus
Alertmanager
Grafana
AWS ECR
Traefik

Continuous Testing
Continuous
Testing

AWS EKS
Cloudformation
AWS S3
AWS Lambda
Jenkins CI
Clair Scanner
Zalenium
OWASP Dependency check
OWASP ZAP
Apache JMeter

Chaos Engineering
Chaos
Engineering

Inducing AWS EC2 failures
via chaos-lambda
Inducing AWS EKS Pod/
Container failures via
Gremlin

Serverless Deployments
Serverless
Deployments

AWS Lambda
API GW
Jenkins CI

Enforce AWS Security Best Practices
Enforce AWS Security
Best Practices

Prowler
Jenkins
AWS Account

Progressive delivery
Progressive delivery
Apexon & AWS
TALK TO US
AWS Services

By submitting this form, you agree that you have read and understand Apexon’s Terms and Conditions. You can opt-out of communications at any time. We respect your privacy.