"Company CEO David Mytton said the release of v1.0 of its Arcjet JavaScript SDK makes it possible for developers to address many of the issues as applications are being developed that DevOps teams would otherwise need to address later in the software development lifecycle (SDLC). Additionally, Arcjet is beta testing a similar SDK for Python developers, who often have even less application security expertise, added Mytton."
"It's not clear to what degree many of the issues that DevOps teams routinely address are simply overlooked by application developers, but the Arcjet SDKs are designed to make it as simple as possible to add a few lines of code to, for example, address security issues as code is being written, noted Mytton. That capability will also prove to be especially crucial as application developers rely more on artificial intelligence (AI) tools to generate code, he added."
"Those tools are generally designed to invoke an SDK versus logging into a separate platform to scan code after it has already been developed, said Mytton. Of course, DevOps teams have, with mixed success, been trying to shift more responsibility for security and other functions further left toward developers for years now. Rather than adding a new tool, it's generally easier for application developers to invoke an SDK to more naturally address those issues, said Mytton."
Arcjet released v1.0 of a JavaScript SDK that enables developers to embed bot detection, rate limiting, email validation, attack protection, and data redaction directly into applications. The SDK allows many security and operational concerns to be addressed during development rather than later in the software development lifecycle, reducing reliance on DevOps teams. A Python SDK is in beta to support developers with less application security expertise. The SDK approach fits AI-assisted code generation workflows because AI tools typically invoke SDKs instead of switching to separate scanning platforms. Arcjet plans to expand SDK functions while minimizing interference with business logic and developer productivity.
Read at DevOps.com
Unable to calculate read time
Collection
[
|
...
]