![\"Powered](\"https://images.prismic.io/amazeeio/ca98541d-16b3-43c4-9134-e9c79a2b9531_CSP-violation-Blog.jpg?auto=compress,format\")
\n \n \n
If you've ever dealt with web security, you've probably heard of CSP (Content Security Policy). It's the unsung hero of the web, silently guarding sites against malicious attacks. However, imagine managing tens of millions of CSP violations every month. Sounds like a monstrous task, right? Let’s dive into how we supported a customer tackling this challenge in a lightweight, super scalable way.
For those new to the CSP world, let’s quickly demystify it. Content Security Policy (CSP) is a web standard designed to control what resources a user’s browser can load on a page. Think of it as a security guard, looking for suspicious activities and preventing malicious attacks.
","raw":[{"type":"paragraph","text":"If you've ever dealt with web security, you've probably heard of CSP (Content Security Policy). It's the unsung hero of the web, silently guarding sites against malicious attacks. However, imagine managing tens of millions of CSP violations every month. Sounds like a monstrous task, right? Let’s dive into how we supported a customer tackling this challenge in a lightweight, super scalable way.","spans":[{"start":241,"end":253,"type":"em"},{"start":241,"end":253,"type":"strong"}]},{"type":"paragraph","text":"","spans":[]},{"type":"heading2","text":"What even is a CSP?","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"For those new to the CSP world, let’s quickly demystify it. Content Security Policy (CSP) is a web standard designed to control what resources a user’s browser can load on a page. Think of it as a security guard, looking for suspicious activities and preventing malicious attacks. ","spans":[]}],"text":"If you've ever dealt with web security, you've probably heard of CSP (Content Security Policy). It's the unsung hero of the web, silently guarding sites against malicious attacks. However, imagine managing tens of millions of CSP violations every month. Sounds like a monstrous task, right? Let’s dive into how we supported a customer tackling this challenge in a lightweight, super scalable way. What even is a CSP? For those new to the CSP world, let’s quickly demystify it. Content Security Policy (CSP) is a web standard designed to control what resources a user’s browser can load on a page. Think of it as a security guard, looking for suspicious activities and preventing malicious attacks. "}}},{"id":"5f3af208-5097-57e4-9fe0-c1b10b393599","slice_type":"block_quote","slice_label":null,"primary":{"content":{"html":"Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement to malware distribution.
– https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
","raw":[{"type":"paragraph","text":"Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement to malware distribution.","spans":[{"start":0,"end":282,"type":"em"}]},{"type":"paragraph","text":"– https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP","spans":[{"start":2,"end":55,"type":"hyperlink","data":{"link_type":"Web","url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP","target":"_blank"}}]}],"text":"Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement to malware distribution. – https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP"}}},{"id":"d45beca1-fc46-5f14-a0bf-ef66bf8ff1a6","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Enter the challenge. A significant government agency in Australia uses CSP on its site. Sounds pretty straightforward, but here's the twist: no matter how tuned a CSP is, it can only partially prevent violations. Why? Unpredictable elements, like browser extensions, often trigger some violations.
The agency's site, built on Drupal, could log CSP violations using the Seckit module. But with the astronomical number of violations, it was like we were asking a household vacuum to clean an entire beach! And before you ask, third-party tools were off the table due to the usual government security and procurement processes.
We needed to roll something lightweight and scalable.
So, how did we solve this mountain of a challenge? First, we ditched Drupal for logging these violations. Drupal is just too heavy for this volume.
Instead, we picked a zippy dedicated Golang binary that snugly fits into its own container within the amazee.io project and is easily deployed by Lagoon. The stars of this setup?
Firstly the go-CSP-collector streamlined the collection like a charm.
And secondly, Lagoon for deploying the application on the amazee.io platform.
Hosting this as a service in our Lagoon project was relatively quick. Lagoon is more than just the application deployment component for amazee.io. It’s also not just a dream for developers, ensuring congruent environments, 100% open source transparency, and top-notch web application delivery. It is also incredibly flexible!
We settled on using the `basic` service type from Lagoon, explicitly crafted for extended services like this scenario required. More about Lagoon service types can be found on the lagoon.sh website.
So the amazee.io team got to work lending a hand to our customers, helping them master the art of multi-stage docker builds to keep their image lean and mean.
While the story of solving a scale problem is fascinating, for those technical folks reading, we thought we’d break down the mechanics of our solution. Let’s look at the magic behind the curtains!
To our `docker-compose.yml`, we add the following:
","raw":[{"type":"heading2","text":"Our Australian CSP Adventure","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"Enter the challenge. A significant government agency in Australia uses CSP on its site. Sounds pretty straightforward, but here's the twist: no matter how tuned a CSP is, it can only partially prevent violations. Why? Unpredictable elements, like browser extensions, often trigger some violations. ","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"The agency's site, built on Drupal, could log CSP violations using the Seckit module. But with the astronomical number of violations, it was like we were asking a household vacuum to clean an entire beach! And before you ask, third-party tools were off the table due to the usual government security and procurement processes. ","spans":[{"start":71,"end":77,"type":"strong"},{"start":71,"end":77,"type":"hyperlink","data":{"link_type":"Web","url":"https://www.drupal.org/project/seckit","target":"_blank"}}]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"We needed to roll something lightweight and scalable.","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"heading2","text":"The Road to Golang and Lagoon","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"So, how did we solve this mountain of a challenge? First, we ditched Drupal for logging these violations. Drupal is just too heavy for this volume.","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"Instead, we picked a zippy dedicated Golang binary that snugly fits into its own container within the amazee.io project and is easily deployed by Lagoon. The stars of this setup? ","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"Firstly the go-CSP-collector streamlined the collection like a charm. ","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"And secondly, Lagoon for deploying the application on the amazee.io platform.","spans":[{"start":14,"end":20,"type":"strong"},{"start":14,"end":20,"type":"hyperlink","data":{"link_type":"Web","url":"https://lagoon.sh","target":"_blank"}}]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"Hosting this as a service in our Lagoon project was relatively quick. Lagoon is more than just the application deployment component for amazee.io. It’s also not just a dream for developers, ensuring congruent environments, 100% open source transparency, and top-notch web application delivery. It is also incredibly flexible! ","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"We settled on using the `basic` service type from Lagoon, explicitly crafted for extended services like this scenario required. More about Lagoon service types can be found on the lagoon.sh website.","spans":[{"start":180,"end":189,"type":"strong"},{"start":180,"end":189,"type":"hyperlink","data":{"link_type":"Web","url":"https://docs.lagoon.sh/using-lagoon-advanced/service-types/","target":"_blank"}}]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"So the amazee.io team got to work lending a hand to our customers, helping them master the art of multi-stage docker builds to keep their image lean and mean.","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"heading2","text":"What’s going on under the hood?","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"While the story of solving a scale problem is fascinating, for those technical folks reading, we thought we’d break down the mechanics of our solution. Let’s look at the magic behind the curtains!","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"heading3","text":"Docker Compose Setup","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"To our `docker-compose.yml`, we add the following:","spans":[]}],"text":"Our Australian CSP Adventure Enter the challenge. A significant government agency in Australia uses CSP on its site. Sounds pretty straightforward, but here's the twist: no matter how tuned a CSP is, it can only partially prevent violations. Why? Unpredictable elements, like browser extensions, often trigger some violations. The agency's site, built on Drupal, could log CSP violations using the Seckit module. But with the astronomical number of violations, it was like we were asking a household vacuum to clean an entire beach! And before you ask, third-party tools were off the table due to the usual government security and procurement processes. We needed to roll something lightweight and scalable. The Road to Golang and Lagoon So, how did we solve this mountain of a challenge? First, we ditched Drupal for logging these violations. Drupal is just too heavy for this volume. Instead, we picked a zippy dedicated Golang binary that snugly fits into its own container within the amazee.io project and is easily deployed by Lagoon. The stars of this setup? Firstly the go-CSP-collector streamlined the collection like a charm. And secondly, Lagoon for deploying the application on the amazee.io platform. Hosting this as a service in our Lagoon project was relatively quick. Lagoon is more than just the application deployment component for amazee.io. It’s also not just a dream for developers, ensuring congruent environments, 100% open source transparency, and top-notch web application delivery. It is also incredibly flexible! We settled on using the `basic` service type from Lagoon, explicitly crafted for extended services like this scenario required. More about Lagoon service types can be found on the lagoon.sh website. So the amazee.io team got to work lending a hand to our customers, helping them master the art of multi-stage docker builds to keep their image lean and mean. What’s going on under the hood? While the story of solving a scale problem is fascinating, for those technical folks reading, we thought we’d break down the mechanics of our solution. Let’s look at the magic behind the curtains! Docker Compose Setup To our `docker-compose.yml`, we add the following:"}}},{"id":"34d22238-d58a-53eb-8524-32effdb13137","slice_type":"raw_html","slice_label":null,"primary":{"html_content":{"html":"<pre>
services:
…
csp:
build:
context: .
dockerfile: .docker/csp.dockerfile
labels:
lagoon.type: basic
ports:
- '3000:3000'
</pre>
\nservices:\n…\n csp:\n build:\n context: .\n dockerfile: .docker/csp.dockerfile\n labels:\n lagoon.type: basic\n ports:\n - '3000:3000'\n\n","spans":[]}],"text":"
\nservices:\n…\n csp:\n build:\n context: .\n dockerfile: .docker/csp.dockerfile\n labels:\n lagoon.type: basic\n ports:\n - '3000:3000'\n\n"}}},{"id":"06893f0e-cdaf-5e13-b31e-bd747768dc39","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"
This segment is essentially how we tell Lagoon to build our Golang container. The `lagoon.type: basic` is important to note - this is the directive for Lagoon, telling it to treat this service as a base type which by default listens on port 3000. Lagoon will test port 3000 when the container is deployed to confirm the service is running.
Now, let's take a quick tour of the CSP service Dockerfile:
","raw":[{"type":"paragraph","text":"This segment is essentially how we tell Lagoon to build our Golang container. The `lagoon.type: basic` is important to note - this is the directive for Lagoon, telling it to treat this service as a base type which by default listens on port 3000. Lagoon will test port 3000 when the container is deployed to confirm the service is running.","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"heading3","text":"The CSP Dockerfile","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"Now, let's take a quick tour of the CSP service Dockerfile:","spans":[]}],"text":"This segment is essentially how we tell Lagoon to build our Golang container. The `lagoon.type: basic` is important to note - this is the directive for Lagoon, telling it to treat this service as a base type which by default listens on port 3000. Lagoon will test port 3000 when the container is deployed to confirm the service is running. The CSP Dockerfile Now, let's take a quick tour of the CSP service Dockerfile:"}}},{"id":"15505fec-4c63-55d0-bcc5-3521b42355d2","slice_type":"raw_html","slice_label":null,"primary":{"html_content":{"html":"<pre>
FROM golang:alpine as builder
ARG VERSION=0.0.10
RUN apk update \\
&& apk add curl \\
&& mkdir /tmp/csp \\
&& cd /tmp/csp \\
&& curl -L https://github.com/jacobbednarz/go-csp-collector/archive/refs/tags/v${VERSION}.zip > csp.zip \\
&& unzip csp.zip \\
&& cd go-csp-collector-${VERSION} \\
&& go build csp_collector.go \\
&& mkdir /csp \\
&& mv csp_collector /csp
FROM alpine
COPY --from=builder /csp /csp
WORKDIR /csp
CMD ["/csp/csp_collector", "--port", "3000"]
</pre>
\nFROM golang:alpine as builder\n\nARG VERSION=0.0.10\n\nRUN apk update \\\n && apk add curl \\\n && mkdir /tmp/csp \\\n && cd /tmp/csp \\\n && curl -L https://github.com/jacobbednarz/go-csp-collector/archive/refs/tags/v${VERSION}.zip > csp.zip \\\n && unzip csp.zip \\\n && cd go-csp-collector-${VERSION} \\\n && go build csp_collector.go \\\n && mkdir /csp \\\n && mv csp_collector /csp\n\nFROM alpine\n\nCOPY --from=builder /csp /csp\n\nWORKDIR /csp\n\nCMD [\"/csp/csp_collector\", \"--port\", \"3000\"]\n","spans":[]}],"text":"\nFROM golang:alpine as builder\n\nARG VERSION=0.0.10\n\nRUN apk update \\\n && apk add curl \\\n && mkdir /tmp/csp \\\n && cd /tmp/csp \\\n && curl -L https://github.com/jacobbednarz/go-csp-collector/archive/refs/tags/v${VERSION}.zip > csp.zip \\\n && unzip csp.zip \\\n && cd go-csp-collector-${VERSION} \\\n && go build csp_collector.go \\\n && mkdir /csp \\\n && mv csp_collector /csp\n\nFROM alpine\n\nCOPY --from=builder /csp /csp\n\nWORKDIR /csp\n\nCMD [\"/csp/csp_collector\", \"--port\", \"3000\"]\n"}}},{"id":"916ff540-bd7d-57bf-8839-f79aa53543d0","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"We start from a base image, `golang:alpine`, which is lightweight and equipped with a Go installation. We use this in the first stage of our multistage build to build our application.
Once we have downloaded the source and compiled the application (based on the open source jacobbednarz/go-csp-collector), all we need from the builder is the compiled CSP binary, so we switch to the next stage in the build and copy the binary into a standard thin alpine image which will run the binary.
We do this for at least two reasons:
With everything in place, we tell the CSP application to start listening on port 3000 on startup. The Lagoon `basic` service type also monitors port 3000, so if, for any reason, our application stops responding, this will alert Kubernetes to take corrective actions.
With this setup, our CSP collector service is ready to be built and deployed by Lagoon. When deployed, it's isolated yet part of the bigger picture, efficiently catching the tens of millions of violations
Below we see our container, scanned by Trivy, and only 7.2MB in size!
","raw":[{"type":"paragraph","text":"We start from a base image, `golang:alpine`, which is lightweight and equipped with a Go installation. We use this in the first stage of our multistage build to build our application.","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"Once we have downloaded the source and compiled the application (based on the open source jacobbednarz/go-csp-collector), all we need from the builder is the compiled CSP binary, so we switch to the next stage in the build and copy the binary into a standard thin alpine image which will run the binary. ","spans":[{"start":90,"end":119,"type":"strong"},{"start":90,"end":119,"type":"hyperlink","data":{"link_type":"Web","url":"https://github.com/jacobbednarz/go-csp-collector","target":"_blank"}}]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"We do this for at least two reasons:","spans":[]},{"type":"o-list-item","text":"We save ourselves a lot of storage space by using the lightest possible image","spans":[]},{"type":"o-list-item","text":"By limiting what we have in the container, we explicitly reduce the attack surface of any application in the container by, essentially, limiting what is in the container to be attacked.","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"With everything in place, we tell the CSP application to start listening on port 3000 on startup. The Lagoon `basic` service type also monitors port 3000, so if, for any reason, our application stops responding, this will alert Kubernetes to take corrective actions.","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"With this setup, our CSP collector service is ready to be built and deployed by Lagoon. When deployed, it's isolated yet part of the bigger picture, efficiently catching the tens of millions of violations ","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"Below we see our container, scanned by Trivy, and only 7.2MB in size!","spans":[]}],"text":"We start from a base image, `golang:alpine`, which is lightweight and equipped with a Go installation. We use this in the first stage of our multistage build to build our application. Once we have downloaded the source and compiled the application (based on the open source jacobbednarz/go-csp-collector), all we need from the builder is the compiled CSP binary, so we switch to the next stage in the build and copy the binary into a standard thin alpine image which will run the binary. We do this for at least two reasons: We save ourselves a lot of storage space by using the lightest possible image By limiting what we have in the container, we explicitly reduce the attack surface of any application in the container by, essentially, limiting what is in the container to be attacked. With everything in place, we tell the CSP application to start listening on port 3000 on startup. The Lagoon `basic` service type also monitors port 3000, so if, for any reason, our application stops responding, this will alert Kubernetes to take corrective actions. With this setup, our CSP collector service is ready to be built and deployed by Lagoon. When deployed, it's isolated yet part of the bigger picture, efficiently catching the tens of millions of violations Below we see our container, scanned by Trivy, and only 7.2MB in size!"}}},{"id":"9bbe187f-97eb-5f58-b6af-6b5290db9912","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"\n\n ![\"Master](\"https://images.prismic.io/amazeeio/69d8d0c4-a80e-4b4e-8c5f-17804802f741_Master-CSP.jpg?auto=compress,format\")
\n
Fast forward to now, the system is handling a whopping 38 million CSP violations every month, all without breaking a sweat.
And the best part? The main Drupal site remains unaffected, singing its merry tune and performing content delivery as it was designed to.
","raw":[{"type":"heading2","text":"The Result","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"Fast forward to now, the system is handling a whopping 38 million CSP violations every month, all without breaking a sweat. ","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"And the best part? The main Drupal site remains unaffected, singing its merry tune and performing content delivery as it was designed to. ","spans":[]}],"text":"The Result Fast forward to now, the system is handling a whopping 38 million CSP violations every month, all without breaking a sweat. And the best part? The main Drupal site remains unaffected, singing its merry tune and performing content delivery as it was designed to. "}}},{"id":"dd4a060c-3882-57ed-b724-d9ccf7ce36cc","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"\n\n ![\"38](\"https://images.prismic.io/amazeeio/cbd65c07-a462-4efe-a214-7f4dd08f7b9c_The-Result.jpg?auto=compress,format\")
\n
Below we see an example of a logged CSP violation (with names changed to protect the innocent!)
","raw":[{"type":"paragraph","text":"Below we see an example of a logged CSP violation (with names changed to protect the innocent!)","spans":[]}],"text":"Below we see an example of a logged CSP violation (with names changed to protect the innocent!)"}}},{"id":"3948ab38-9735-575c-b80d-e5af026f984f","slice_type":"raw_html","slice_label":null,"primary":{"html_content":{"html":"<pre>
<strong>timestamp</strong>="2023-08-06T21:21:38Z"
<strong>level</strong>=info
<strong>blocked_uri</strong>="https://redacted.redacted.redacted/script/5525/webReader/webReader.js?pids=wr"
<strong>disposition</strong>=report document_uri="https://redacted.redacted.redacted/contact-us?context=64107"
<strong>effective_directive</strong>=script-src-elem metadata=""
<strong>original_policy</strong>="default-src 'self'; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.nr-data.net *.readspeaker.com translate.googleapis.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com themes.googleusercontent.com; frame-src 'self' *.azurewebsites.net *.googletagmanager.com redacted.redacted.redacted *.readspeaker.com redacted.redacted.redacted.vudoo.io youtube.com *.youtube.com; img-src 'self' bam.nr-data.net chart.apis.google.com data: *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com i.ytimg.com translate.googleapis.com; object-src 'none'; script-src 'self' 'unsafe-eval' api.microsofttranslator.com bam.nr-data.net *.google-analytics.com *.googleoptimize.com *.googletagmanager.com js-agent.newrelic.com https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net; script-src-elem 'self' 'unsafe-inline' *.google-analytics.com *.googleoptimize.com *.googletagmanager.com *.newrelic.com *.nr-data.net translate.googleapis.com https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.readspeaker.com f1-oc.readspeaker.com; style-src-attr 'self' 'unsafe-inline' 'unsafe-hashes'; style-src-elem 'self' 'unsafe-inline' f1-oc.readspeaker.com fonts.googleapis.com *.googletagmanager.com translate.googleapis.com; base-uri 'self'; form-action 'self' https://redacted.redacted.redacted.com; frame-ancestors 'self'; report-uri https://redacted.redacted.redacted"
<strong>referrer</strong>="https://redacted.redacted.redacted/"
<strong>script_sample</strong>=""
<strong>status_code</strong>=200
<strong>violated_directive</strong>=script-src-ele
</pre>
\ntimestamp=\"2023-08-06T21:21:38Z\"\nlevel=info\nblocked_uri=\"https://redacted.redacted.redacted/script/5525/webReader/webReader.js?pids=wr\"\ndisposition=report document_uri=\"https://redacted.redacted.redacted/contact-us?context=64107\"\neffective_directive=script-src-elem metadata=\"\"\noriginal_policy=\"default-src 'self'; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.nr-data.net *.readspeaker.com translate.googleapis.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com themes.googleusercontent.com; frame-src 'self' *.azurewebsites.net *.googletagmanager.com redacted.redacted.redacted *.readspeaker.com redacted.redacted.redacted.vudoo.io youtube.com *.youtube.com; img-src 'self' bam.nr-data.net chart.apis.google.com data: *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com i.ytimg.com translate.googleapis.com; object-src 'none'; script-src 'self' 'unsafe-eval' api.microsofttranslator.com bam.nr-data.net *.google-analytics.com *.googleoptimize.com *.googletagmanager.com js-agent.newrelic.com https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net; script-src-elem 'self' 'unsafe-inline' *.google-analytics.com *.googleoptimize.com *.googletagmanager.com *.newrelic.com *.nr-data.net translate.googleapis.com https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.readspeaker.com f1-oc.readspeaker.com; style-src-attr 'self' 'unsafe-inline' 'unsafe-hashes'; style-src-elem 'self' 'unsafe-inline' f1-oc.readspeaker.com fonts.googleapis.com *.googletagmanager.com translate.googleapis.com; base-uri 'self'; form-action 'self' https://redacted.redacted.redacted.com; frame-ancestors 'self'; report-uri https://redacted.redacted.redacted\"\nreferrer=\"https://redacted.redacted.redacted/\"\nscript_sample=\"\"\nstatus_code=200\nviolated_directive=script-src-ele\n","spans":[]}],"text":"
\ntimestamp=\"2023-08-06T21:21:38Z\"\nlevel=info\nblocked_uri=\"https://redacted.redacted.redacted/script/5525/webReader/webReader.js?pids=wr\"\ndisposition=report document_uri=\"https://redacted.redacted.redacted/contact-us?context=64107\"\neffective_directive=script-src-elem metadata=\"\"\noriginal_policy=\"default-src 'self'; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.nr-data.net *.readspeaker.com translate.googleapis.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com themes.googleusercontent.com; frame-src 'self' *.azurewebsites.net *.googletagmanager.com redacted.redacted.redacted *.readspeaker.com redacted.redacted.redacted.vudoo.io youtube.com *.youtube.com; img-src 'self' bam.nr-data.net chart.apis.google.com data: *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com i.ytimg.com translate.googleapis.com; object-src 'none'; script-src 'self' 'unsafe-eval' api.microsofttranslator.com bam.nr-data.net *.google-analytics.com *.googleoptimize.com *.googletagmanager.com js-agent.newrelic.com https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net; script-src-elem 'self' 'unsafe-inline' *.google-analytics.com *.googleoptimize.com *.googletagmanager.com *.newrelic.com *.nr-data.net translate.googleapis.com https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net https://redacted.redacted.redacted.azurewebsites.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.readspeaker.com f1-oc.readspeaker.com; style-src-attr 'self' 'unsafe-inline' 'unsafe-hashes'; style-src-elem 'self' 'unsafe-inline' f1-oc.readspeaker.com fonts.googleapis.com *.googletagmanager.com translate.googleapis.com; base-uri 'self'; form-action 'self' https://redacted.redacted.redacted.com; frame-ancestors 'self'; report-uri https://redacted.redacted.redacted\"\nreferrer=\"https://redacted.redacted.redacted/\"\nscript_sample=\"\"\nstatus_code=200\nviolated_directive=script-src-ele\n"}}},{"id":"491cb262-2b8f-5073-8797-573aef03f1e3","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"
This journey showed us that with the right approach and tooling choices, a pinch of innovation, and a healthy dose of Lagoon flexibility, large-scale CSP can be achieved for large enterprises and government customers without relying on third-party tools and platforms.
Open Source Wins Again!
This story definitely underscores the capabilities of Kubernetes, Lagoon, and amazee.io, showing how they handle large-scale tasks without missing a beat. So, the next time you're facing a tech conundrum and starting to reach for third-party tools, remember there may be a simple, secure, and scalable open source solution deployable by Lagoon on amazee.io.
If you’re interested in learning how amazee.io’s ZeroOps application delivery platform could help solve your technology challenges and achieve your strategic goals, 🗓️ schedule your free technical demo below.
","raw":[{"type":"paragraph","text":"This journey showed us that with the right approach and tooling choices, a pinch of innovation, and a healthy dose of Lagoon flexibility, large-scale CSP can be achieved for large enterprises and government customers without relying on third-party tools and platforms.","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"Open Source Wins Again!","spans":[{"start":0,"end":23,"type":"strong"}]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"This story definitely underscores the capabilities of Kubernetes, Lagoon, and amazee.io, showing how they handle large-scale tasks without missing a beat. So, the next time you're facing a tech conundrum and starting to reach for third-party tools, remember there may be a simple, secure, and scalable open source solution deployable by Lagoon on amazee.io.","spans":[]},{"type":"paragraph","text":"","spans":[]},{"type":"paragraph","text":"If you’re interested in learning how amazee.io’s ZeroOps application delivery platform could help solve your technology challenges and achieve your strategic goals, 🗓️ schedule your free technical demo below.","spans":[{"start":183,"end":202,"type":"strong"}]}],"text":"This journey showed us that with the right approach and tooling choices, a pinch of innovation, and a healthy dose of Lagoon flexibility, large-scale CSP can be achieved for large enterprises and government customers without relying on third-party tools and platforms. Open Source Wins Again! This story definitely underscores the capabilities of Kubernetes, Lagoon, and amazee.io, showing how they handle large-scale tasks without missing a beat. So, the next time you're facing a tech conundrum and starting to reach for third-party tools, remember there may be a simple, secure, and scalable open source solution deployable by Lagoon on amazee.io. If you’re interested in learning how amazee.io’s ZeroOps application delivery platform could help solve your technology challenges and achieve your strategic goals, 🗓️ schedule your free technical demo below."}}},{"id":"fec9c2ec-aa1c-58fd-8564-9d29261cf802","slice_type":"raw_html","slice_label":null,"primary":{"html_content":{"html":"<iframe title="1:1 Technical Demo" style="width:100%;height: 650px;" src="https://go.amazee.io/meetings/martin-schloegl/live-demo?embed=true"></iframe>
","raw":[{"type":"paragraph","text":"","spans":[]}],"text":""}}}],"summary":"If you've ever dealt with web security, you've probably heard of CSP (Content Security Policy). It's the unsung hero of the web, silently guarding sites against malicious attacks.","canonical_url":null,"unlisted":false,"calendar_title":null,"calendar_embed":{"url":""},"calender_heading":null,"calender_subheading":null,"calender_body":{"html":"","raw":[],"text":""},"calender_image":{"url":null,"alt":null},"images":[{"path":"https://images.prismic.io/amazeeio/ca98541d-16b3-43c4-9134-e9c79a2b9531_CSP-violation-Blog.jpg?auto=compress%2Cformat"}]},"suggestedPosts":[{"topLevelBlogData":{"tags":[{"slug":"news","name":"News","include_in_header":true},{"slug":"tips-tricks","name":"Knowledge Base","include_in_header":true},{"slug":"culture","name":"Culture","include_in_header":true},{"slug":"success-stories","name":"Success Stories","include_in_header":false},{"slug":"roadmap","name":"Lagoon Roadmap","include_in_header":false},{"slug":"events","name":"Events","include_in_header":true}],"availablePrismicBlogs":[{"slug":"women-in-tech-brittany-mitchell","title":"Women in Tech - Q&A with Brittany Mitchell, Platform Engineer"},{"slug":"multi-region-failover-explained-cross-cloud-resilience","title":"Multi-Region Failover: Cross-Cloud Resilience Explained"},{"slug":"women-in-tech-lauren-morris","title":"Women in Tech - Q&A with Lauren Morris, Head of Product"},{"slug":"women-in-tech-nicole-ritchie","title":"Women in Tech - Q&A with Nicole Ritchie, Customer Success Lead"},{"slug":"women-in-tech-bree-benesh","title":"Women in Tech - Q&A with Bree Benesh, Product Manager"},{"slug":"women-in-tech-deeksha-kini","title":"Women in Tech - Q&A with Deeksha Kini, Systems Support Engineer"},{"slug":"dependency-track-software-supply-chain-security","title":"Managed Dependency-Track: The 2026 Guide to Continuous Supply Chain Security"},{"slug":"drupal-dev-days-athens-2026-recap","title":"Drupal Dev Days Athens 2026: Vibe Coding, Ancient Hospitality, and the Future of Drupal"},{"slug":"byoc-bring-your-own-cloud-guide","title":"Bring Your Own Cloud (BYOC): The Hosting Architecture of Trust for 2026"},{"slug":"fault-tolerant-enterprise-hosting","title":"Fault-Tolerant Enterprise Hosting: From Self-Healing Infrastructure to Deployment Strategies That Never Fail"},{"slug":"ab-bark-road-playlist-2026","title":"Ab-bark Road – amazee.io Team Playlist 2026"},{"slug":"apm-and-observability","title":"APM and Observability: Essential Platforms for Modern Enterprises"},{"slug":"kitty-stardust-playlist-2025","title":"Kitty Stardust – amazee.io Team Playlist 2025"},{"slug":"fully-managed-secured-data-hosting-service","title":"Beyond Uptime: Why Fully Managed Secured Data Hosting is Your Best Defense Against Security Risks"},{"slug":"high-scalability-hosting-for-drupal-projects","title":"High Scalability Hosting for Your Enterprise Drupal Projects"},{"slug":"drupalcon-europe-2025-vienna-recap","title":"DrupalCon Europe 2025 - Vienna: Recap"},{"slug":"amazeeio-acquires-amazeelabs","title":"The amazee Reunion: amazee.io Acquires Amazee Labs, Reuniting Two Tech Powerhouses"},{"slug":"drupal-hosting-iso-27001-certification","title":"Your Enterprise Security Advantage: ISO/IEC 27001 Certified Drupal Hosting Excellence"},{"slug":"drupals-strategic-ai-initiative-our-commitment","title":"Our Commitment to Drupal’s Strategic AI Initiative"},{"slug":"introducing-brittany-bailey","title":"Welcome, Brittany Bailey, our new Delivery Manager"},{"slug":"introducing-lanette-miller","title":"Meet Lanette Miller, our new Technical Account Manager"},{"slug":"introducing-ryan-price","title":"Introducing Ryan Price, our new Technical Account Manager"},{"slug":"introducing-katywalsh","title":"Introducing Katy Walsh, our new Marketing Lead"},{"slug":"enterprise-drupal-migrations-done-right","title":"From Monoliths to Multi-Sites: Two Stories of Enterprise Drupal Website Migrations Done Right"},{"slug":"ddos-attack-mitigation-for-enterprises","title":"DDoS Attack Mitigation for Enterprises: Protect Your Digital Properties"},{"slug":"future-of-work-conference-2024-highlights","title":"Future of Work Conference 2024: Highlights and Key Takeaways"},{"slug":"headless-drupal-basics-for-enterprises","title":"Headless Drupal Basics For Modern Enterprises"},{"slug":"update-from-franz","title":"A personal update from Franz on stepping back from his role as CEO of amazee.io"},{"slug":"push-your-code-well-handle-the-rest","title":"Push Your Code. We’ll Handle The Rest."},{"slug":"data-pipelines-for-rag","title":"Data Pipelines for RAG"},{"slug":"building-a-private-llm-chatbot-learnings-insights","title":"Building a Private LLM Chatbot: Learning and Insights"},{"slug":"drupal-7-end-of-life","title":"Drupal 7 End of Life: How We Help"},{"slug":"introducing-dimitra-chatzichrysou","title":"Meet amazee.io’s new Platform Engineer, Dimitra Chatzichrysou"},{"slug":"welcome-karl-hepworth","title":"Welcome, Karl Hepworth, amazee.io’s new Platform Engineer"},{"slug":"lagoon-v220-release","title":"Lagoon V2.20 Release: New Features and Enhancements"},{"slug":"introducing-lauren-morris","title":"Welcome, Lauren Morris, Our New Product Manager at amazee.io!"},{"slug":"meet-glyn-davies","title":"Meet Glyn Davies, our new Platform Engineer!"},{"slug":"introducing-laura-caraker","title":"Introducing Laura Caraker, our new Sales Representative"},{"slug":"introducing-sailonlagoon","title":"Provision and Deploy Laravel on amazee.io - Introducing Sail:onLagoon"},{"slug":"building-a-private-llm-chatbot","title":"Building a Private LLM Chatbot from Technical Documentation: Challenges and Solutions"},{"slug":"what-is-green-web-hosting","title":"What is Green Web Hosting?"},{"slug":"cdn-waf-enhancing-protecting-your-website","title":"CDN + WAF: Enhancing and Protecting Your Website"},{"slug":"live-webinar-secure-at-speed-with-fastly-edge-delivery","title":"Webinar: Secure at Speed with Fastly - Edge Delivery Without Compromise"},{"slug":"automating-migrations-between-lagoon-clusters-and-embracing-managed-kubernetes","title":"Automating Migrations Between Lagoon Clusters, and Embracing Managed Kubernetes"},{"slug":"asynchronous-communication-in-a-globally-remote-team","title":"Asynchronous Communication in a Globally Remote Team"},{"slug":"a-new-home-and-platform-for-our-lagoon-documentation","title":"A New Home (and Platform) for Our Lagoon Documentation"},{"slug":"amazee-io-joins-aws-isv-accelerate-program","title":"amazee.io joins AWS ISV Accelerate Program to accelerate developer experience"},{"slug":"austin-sprint-week-recap","title":"Support for Native Kubernetes – Austin Sprint Week Recap"},{"slug":"amazeeio-now-available-in-aws-marketplace","title":"amazee.io – Now Available in AWS Marketplace"},{"slug":"amazee.io--a-worldwide-family","title":"amazee.io – a worldwide family"},{"slug":"amazee-io-joins-mirantis","title":"Taking steps to further improve the developer experience: amazee.io joins Mirantis"},{"slug":"amazee-io-recognized-with-aws-devops-software-competency","title":"amazee.io recognized with AWS DevOps Software Competency"},{"slug":"are-you-ready-for-drupalsouth-shorts","title":"Are you ready for DrupalSouth Shorts?"},{"slug":"amazee-io-virtual-birthday-panel","title":"Join us for amazee.io’s Virtual Birthday Panel!"},{"slug":"a-marketers-perspective-on-web-hosting","title":"A Marketer’s Perspective on Switching Hosting Providers"},{"slug":"5-key-reasons-more-businesses-are-relying-on-webops","title":"5 Key Reasons More Businesses are Relying on WebOps in 2022"},{"slug":"announcing-lando-integration-for-lagoon","title":"Announcing Lando Integration for Lagoon"},{"slug":"amazee-io-earns-high-performer-ranking","title":"amazee.io earns High Performer ranking in Web Hosting and Continuous Delivery on G2"},{"slug":"live-uncover-hidden-vulnerabilities-with-dependency-track","title":"Webinar: Uncover Hidden Vulnerabilities - Continuous Software Security with Dependency-Track"},{"slug":"sounds-like-team-spirit-playlist-2024","title":"Sounds Like Team Spirit – amazee.io Team Playlist 2024"},{"slug":"drupal-dxp-built-for-decoupled-enterprise-hosting","title":"Drupal: The DXP Built for Decoupled Enterprise Website Hosting"},{"slug":"why-enterprises-turn-to-private-ai-solutions","title":"Webinar: Why Smart Enterprises Are Turning to Private AI Solutions"},{"slug":"webinar-launch-drupal-ai-provider","title":"Webinar: Private Drupal AI Provider – From Demo to Launch"},{"slug":"drupalcon-na-2021-recap-the-amazee-io-sessions","title":"DrupalCon North America 2021 Recap: The amazee.io Sessions"},{"slug":"meet-brand-ambassador-jason-lewis","title":"Welcome Jason Lewis, our Brand Ambassador"},{"slug":"meet-matt-swann","title":"Meet Matt Swan, our new UX Product Designer"},{"slug":"welcome-jay-porter","title":"Meet Jay Porter, our Technical Account Manager"},{"slug":"webinar-recap-lagoon-insights","title":"Webinar Recap: Lagoon Insights"},{"slug":"say-hello-to-peter-wettstein","title":"Say hello to Peter, our new Technical Account Manager"},{"slug":"what-was-the-cwp-for-the-new-zealand-government-and-whats-next","title":"What was the CWP for the New Zealand Government — and what's next?"},{"slug":"lagoon-2-is-available-now","title":"Lagoon 2 is Available Now! Here’s What’s New"},{"slug":"welcome-bobby-our-new-technical-account-manager","title":"Meet Bobby Kindle, our Technical Account Manager"},{"slug":"webinar-recap-how-to-simplify-your-development-workflow","title":"Webinar Recap: How to simplify your development workflow with Lando and Lagoon"},{"slug":"were-going-to-drupalcon-global","title":"We’re going to DrupalCon Global — see you online!"},{"slug":"webinar-recap-blue-green-deployments-with-activestandby","title":"Webinar Recap: Blue-Green Deployments with Active/Standby on Lagoon"},{"slug":"get-to-know-a-tam-sean-hamlin","title":"Get to Know a Technical Account Management Lead: Sean Hamlin"},{"slug":"lagoon-insights-webinar","title":"Lagoon Insights webinar"},{"slug":"introducing-nicole-laine","title":"Introducing Nicole Laine, our Digital Marketing and Advertising Specialist!"},{"slug":"joint-webinar-recap-the-future-of-web-development","title":"Joint Webinar Recap: The Future of Web Development and Hosting"},{"slug":"joint-webinar-recap-advanced-lando-ing-with-lagoon","title":"Joint Webinar Recap: Advanced Lando-ing with Lagoon"},{"slug":"joint-webinar-devportal-as-a-service-enabled-by-amazeeio","title":"Joint Webinar - DevPortal as a Service, deployed wherever the customer needs it, enabled by amazee.io"},{"slug":"is-cloud-native-too-hard-to-hire-for","title":"Is cloud native too hard to hire for? amazee.io can help simplify the process. Here’s how."},{"slug":"drupalcon-europe-2020-speaker-video-replay","title":"DrupalCon Europe 2020 Speaker Video Replay"},{"slug":"welcome-to-the-team-jonathan-peter","title":"Welcome to the team, Jonathan Peter – our new IT LEAD!"},{"slug":"webinar-drupal-ai-private-by-design","title":"Webinar: AI for Drupal - Private-by-Design"},{"slug":"drupal-content-distribution-solutions","title":"Drupal Content Distribution Solutions"},{"slug":"composable-web-drupal-web-hosting-and-the-future-of-web-architectures","title":"Composable web: Drupal web hosting and the future of web architectures"},{"slug":"will-greener-hosting-help","title":"Will greener hosting help reduce my website’s carbon emissions?"},{"slug":"dedicated-cloud-an-introductory-guide","title":"Dedicated Cloud: An Introductory Guide to Hosting Drupal and Other Enterprise CMS Software"},{"slug":"join-us-in-welcoming-toby-bellwood--our-new-product","title":"Join us in welcoming Toby Bellwood – our new Product Lead!"},{"slug":"preparing-lagoon-for-drupal-9-launch-day","title":"Preparing Lagoon for Drupal 9 Launch Day"},{"slug":"lagoon-implements-active-standby-a-blue-green-deploy-solution","title":"Lagoon implements “Active/Standby” - A Blue-Green Deploy Solution"},{"slug":"badcamping-virtually-together","title":"BADCamping Virtually Together"},{"slug":"amazee-io-launches-agency-partner-program","title":"amazee.io launches first Agency Partner Program, creating reseller and referral opportunities for agencies around the world"},{"slug":"amazee.io-catalyst-cloud-sparks-panel-discussion","title":"Webinar Recap: How Governments Can Leverage Open Source and the Cloud"},{"slug":"join-amazee-io-at-new-zealand-techweek2021","title":"Join us at New Zealand Techweek2021"},{"slug":"webinar-data-sovereignty-enterprise-drupal-publishing-workflows","title":"Webinar: Drupal Publishing Workflows and Data Sovereignty"},{"slug":"webinar-recap-lagoon-2.0-deploy-into-kubernetes-and","title":"Webinar RECAP: Lagoon 2.0: Deploy into Kubernetes and more!"},{"slug":"meet-us-at-cloudfest-2022","title":"Meet Us At CloudFest 2022"},{"slug":"top-benefits-of-cicd-in-web-hosting","title":"Top benefits of CI/CD in web hosting - and what it means for developers"},{"slug":"the-best-hosting-solution","title":"The Best Enterprise Hosting Solution: Top 3 Things To Look For"},{"slug":"webinar-open-source-power-of-typo3","title":"Better Together: The Open Source Power of TYPO3 CMS and amazee.io"},{"slug":"if-spotify-can-go-down-is-anyone-safe","title":"If Spotify can go down, is anyone safe?"},{"slug":"composable-architecture-and-drupal","title":"Composable Architecture: Why Drupal should be part of your Solution"},{"slug":"introducing-blaize-kaye","title":"Introducing our new Developer Experience and CI/CD Engineer – Blaize Kaye"},{"slug":"smartsheet-dedicated-kubernetes-based-web-hosting","title":"Supporting enterprise SaaS demand with dedicated Kubernetes-based web hosting"},{"slug":"meet-our-new-bizops-lead-ingrid-talbot","title":"Meet Ingrid Talbot, our BizOps Lead"},{"slug":"acquia-site-factory-vs-amazee-io-paas","title":"Acquia Site Factory vs amazee.io PaaS: Why amazee.io has the multisite hosting advantage you need"},{"slug":"welcome-to-the-team-martin","title":"Meet Martin Schlögl, our Head of Sales"},{"slug":"taoti-creative-and-amazee.io-breaking-free-from-limits-to-deliver-more","title":"Taoti Creative - Delivering more for Customers | amazee.io"},{"slug":"lagoon-cli-an-essential-tool-for-managing-lagoon-sites","title":"Lagoon-CLI — an essential tool for managing Lagoon sites."},{"slug":"driven-by-a-global-pandemic-the-world-is-changing","title":"Supporting COVID-19 Response Efforts"},{"slug":"why-were-moving-to-managed-kubernetes","title":"Why we’re moving to Managed Kubernetes"},{"slug":"global-distributed-and-open-source","title":"Proud to be Global, Distributed, and Open Source"},{"slug":"say-hi-to-tobi-nehrlich","title":"Say hi to Tobi Nehrlich, amazee.io’s Platform Lead"},{"slug":"how-to-prepare-your-website-for-high-traffic-events","title":"Case Study: Züri Fäscht — How to Prepare Your Website for High-Traffic Events"},{"slug":"introducing-stephanie-ogozaly-solutions-marketing-manager","title":"Meet Stephanie Ogozaly, our Solutions Marketing Manager"},{"slug":"new-content-marketing-manager-sophia-harris","title":"Say hi to our new Content Marketing Manager – Sophia Harris"},{"slug":"joint-webinar---the-future-of-web-development-and-hosting","title":"Joint Webinar - The future of web development and hosting: how to build performance apps for the modern web"},{"slug":"how-a-global-pharma-company-cut-application-delivery-costs","title":"EKS Migration - Cut App Delivery Costs by 60% | amazee.io"},{"slug":"unlocking-the-power-of-platform-engineering","title":"What Is Platform Engineering | amazee.io"},{"slug":"talking-kubernetes-on-talking-drupal-podcast","title":"Talking Kubernetes on Talking Drupal Podcast"},{"slug":"gitops-vs-devops","title":"GitOps vs. DevOps - What they are and why they are better together"},{"slug":"survive-a-high-traffic-event","title":"7 Tips: How to Survive a High-Traffic Event"},{"slug":"we-are-going-to-drupalcon-north-america","title":"We’re going to DrupalCon North America, April 12–16"},{"slug":"supporting-students-during-uncertain-times","title":"Supporting Students During Uncertain Times"},{"slug":"what-is-zeroops","title":"What is ZeroOps? Solving Your DevOps Challenges"},{"slug":"were-sponsoring-drupalgov-2020-australia","title":"We're Sponsoring, Attending and Speaking at DrupalGov 2020 in Australia"},{"slug":"crank-it-up-the-amazee-io-2021-playlist","title":"Crank It Up: The amazee.io 2021 Playlist Has Arrived"},{"slug":"what-is-webops","title":"What is WebOps? How does it Solve your Hosting Problems?"},{"slug":"matterport-autoscaling-to-meet-peak-demand-with-amazee.io-support","title":"Matterport: Autoscaling to meet peak demand with amazee.io support"},{"slug":"how-one-saas-company-saved-70k-in-startup-costs","title":"How one SaaS company saved $70k in startup costs and went to market a year faster"},{"slug":"govcms-case-study-managing-increased-website-demand","title":"GovCMS Case Study: managing increased website demand during COVID-19"},{"slug":"upcoming-webinar-how-governments-can-leverage-open-source","title":"Upcoming Webinar: How Governments can Leverage Open Source and the Cloud"},{"slug":"html-to-pdf-with-gotenberg-hosted-on-lagoon","title":"HTML to PDF with Gotenberg Hosted on Lagoon"},{"slug":"uptime-monitoring-explained","title":"Uptime Monitoring Explained"},{"slug":"lagoon-2020-roadmap","title":"Lagoon 2020 Roadmap"},{"slug":"what-to-expect-in-lagoon-1-3-0","title":"What to expect in Lagoon 1.3.0"},{"slug":"platform-as-a-service-hitting-the-wall","title":"Platform-as-a-Service: Are you hitting the wall with your Enterprise Drupal Hosting?"},{"slug":"see-you-at-drupalsouth-shorts-2021","title":"We’ll see you at DrupalSouth Shorts 2021"},{"slug":"the-top-7-webops-questions-answered","title":"The Top 7 WebOps Questions Answered"},{"slug":"what-were-releasing-in-lagoon-1.6.0-not-just-drupal-9-compatibility","title":"What we're releasing in Lagoon 1.6.0 - (not just Drupal 9 compatibility)"},{"slug":"welcome-johnny-squardo","title":"Welcome our new Support Engineer, Johnny Squardo"},{"slug":"lagoon-examples-silverstripe-cms","title":"Lagoon examples - Silverstripe CMS"},{"slug":"a-large-credential-stuffing-attack","title":"A Large Credential Stuffing Attack - How We Respond and Mitigate"},{"slug":"simply-push-your-code","title":"“Simply push your code.” What does that mean, exactly?"},{"slug":"open-source-companies-navigating-challenges","title":"Open Source Companies: Navigating Challenges and Building a Business on Open Source"},{"slug":"a-day-in-the-life-inside-lagoon-a-step-by-step-tutorial","title":"A day in the life inside Lagoon: A step-by-step tutorial demo"},{"slug":"amazeeio-is-now-a-kubernetes-certified-service-provider","title":"amazee.io is now a Kubernetes Certified Service Provider (KCSP)"},{"slug":"what-we-released-in-lagoon-1.9----the-ones-before","title":"What we released in Lagoon 1.9 – the one(s) before two"},{"slug":"white-paper-what-is-ci-cd","title":"What is CI/CD? A Primer on Continuous Integration and Continuous Delivery"},{"slug":"lando-and-lagoon-webinar","title":"Webinar: Simplifying your development workflow with Lando and Lagoon"},{"slug":"drupalgov-2020-sessions-recap","title":"DrupalGov 2020 Sessions Recap"},{"slug":"drupal-govcon-2020--here-we-come","title":"Drupal GovCon 2020 – Here We Come!"},{"slug":"a-warm-amazee.io-welcome-to-salvatore-pappalardo","title":"A warm amazee.io welcome to Salvatore Pappalardo – our new Systems Engineer"},{"slug":"amazee-io-as-your-composable-web-platform","title":"amazee.io as your composable web platform"},{"slug":"life-as-a-systems-engineer-at-amazee.io","title":"Life as a Systems Engineer at amazee.io"},{"slug":"lagoon-2.0-vision--what-were-working-on","title":"Lagoon 2.0 Vision – What We’re Working On"},{"slug":"joint-webinar-recap-developer-portals-as-a-service","title":"Joint Webinar Recap: Developer Portals as a Service, enabled by amazee.io"},{"slug":"see-you-at-drupalcon-europe-2020","title":"See You at DrupalCon Europe 2020"},{"slug":"our-new-partner-manager-bryan-gruneberg","title":"Meet our new Partner Manager — Bryan Gruneberg!"},{"slug":"meet-our-new-product-designer--ac-cowart","title":"Meet our new Product Designer – AC Cowart!"},{"slug":"powered-by-lagoon-managing-countless-csp-violations","title":"Powered by Lagoon: Managing countless CSP violations using amazee.io's platform flexibility"},{"slug":"recap-the-first-ever-lagooncon","title":"Recap – The first-ever LagoonCon"},{"slug":"podcast-joining-an-open-source-start-up-to-scale-growth","title":"Podcast: Joining an Open Source Start-Up to Scale Growth"},{"slug":"what-arrived-in-lagoon-1.8.x--a-release-in-three-movements","title":"What arrived in Lagoon 1.8.x – a release in three movements"},{"slug":"origins-of-lagoon-drupaleasy-interview-with-michael-schmid","title":"Origins of Lagoon - Interview with Michael Schmid on Drupal Easy"},{"slug":"developerweek-global-cloud-2021","title":"We’ll be at DeveloperWeek Global: Cloud, September 14-15"},{"slug":"our-drupalcon-global-recap","title":"Our DrupalCon Global Recap"},{"slug":"learn-containers-5-minutes-at-a-time-a-preview","title":"Learn containers 5 minutes at a time: A preview"},{"slug":"office-hours","title":"Office Hours"},{"slug":"lagoon-hacktoberfest-2020-call-for-more-examples","title":"Lagoon Hacktoberfest 2020 – call for more examples!"},{"slug":"what-were-releasing-in-lagoon-1.7.0","title":"What we're releasing in Lagoon 1.7.0"},{"slug":"ceo-franz-karlsberger-takes-the-reins","title":"CEO Franz Karlsberger takes the reins"},{"slug":"webinar-how-to-run-blue-green-deployments-with-active-standby-on-lagoon","title":"Webinar: How to Run Blue-Green Deployments with Active/Standby on Lagoon"},{"slug":"why-we-use-and-recommend-lens-for-kubernetes","title":"Here’s why we use and recommend Lens for Kubernetes"},{"slug":"women-in-tech-spotlight-interview-witb-dania-gerhardt-co-founder-of-amazee-group","title":"Women in Tech Spotlight: Interview with Dania Gerhardt, Co-Founder of Amazee Group"},{"slug":"gitlab-contribution","title":"GitLab Contribution"},{"slug":"webinar-on-lagoon-2-0-deploy-into-kubernetes-and-more","title":"Webinar on Lagoon 2.0 — Deploy into Kubernetes and more!"},{"slug":"exploring-self-managed-kubernetes-heres-what-to-consider","title":"Exploring Self-Managed Kubernetes? Here’s what to consider:"},{"slug":"what-we-released-in-lagoon-1.5.0","title":"What we released in Lagoon 1.5.0"},{"slug":"what-we-released-in-lagoon-1.4.0-and-1.4.1","title":"What we released in Lagoon 1.4.0 (and 1.4.1)"},{"slug":"how-can-we-preserve-developers-freedom","title":"How can we preserve developers’ freedom? And other questions with amazee.io"},{"slug":"what-are-the-benefits-of-using-open-source-software","title":"What are the benefits of using open source software? And other questions with amazee.io"},{"slug":"drupalcon-highlights-video-another-great-year-of-open-source-events","title":"DrupalCon Highlights Video: Another Great Year of Open Source Events"},{"slug":"part-2-how-secure-are-you-in-2022","title":"Part 2: How secure are you in 2022?"},{"slug":"welcome-to-the-team-nicole-ritchie","title":"Welcome to the team, Nicole Richie!"},{"slug":"after-ten-years-as-a-back-end-developer-alanna-decided","title":"A warm amazee.io welcome to Alanna Burke, our new expert on Documentation, Training, and Developer Relations!"},{"slug":"joint-webinar-advanced-lando-ing-with-lagoon","title":"Joint Webinar: Advanced Lando-ing with Lagoon"},{"slug":"what-you-need-to-know-about-open-source-software-and-webops","title":"What you need to know about open source software and DevOps"},{"slug":"meet-us-at-drupalcon-europe-2021","title":"Meet us at DrupalCon Europe 2021"},{"slug":"your-workflow-your-way","title":"Your workflow, your way: Leveraging the Lagoon API for custom CI/CD pipelines & development workflows"},{"slug":"say-hi-to-martina-augurio","title":"Meet Martina Augurio, our Client Engagement Manager"},{"slug":"visit-our-booth-at-drupal-govcon-2021","title":"Visit our booth at Drupal GovCon 2021"},{"slug":"welcome-chris-goodwin","title":"Meet Chris Goodwin, our Software Engineer"},{"slug":"what-is-dedicated-cloud-and-why-you-should-move-to-it","title":"What is Dedicated Cloud? And Why You Should Move to It"},{"slug":"our-highlights-from-new-zealand-techweek2021","title":"Our highlights from New Zealand Techweek2021"},{"slug":"what-is-a-content-delivery-network-cdn","title":"What is a Content Delivery Network (CDN) – and why do you need one?"},{"slug":"watch-now-amazee-io-at-drupalsouth-shorts-2021","title":"Watch Now: amazee.io at DrupalSouth ‘Shorts’ 2021"},{"slug":"introducing-rolando-scott","title":"Meet Rolando Scott, our Technical Account Manager"},{"slug":"welcome-to-amazee-io-mihaela","title":"Meet Mihaela Gheorghe, our Support Engineer"},{"slug":"celebrating-5-years-of-making-developers-lives-easier","title":"Celebrating 5 years of Making Developers’ Lives Easier"},{"slug":"welcome-ashleigh-king","title":"Meet Ashleigh King, our Client Engagement Manager"},{"slug":"join-our-drupal4gov-september-webinar","title":"Join our Drupal4Gov webinar on how to survive high-traffic events"},{"slug":"welcome-cezary-rataj","title":"Welcome Cezary Rataj, our new Delivery Lead at amazee.io!"},{"slug":"master-the-fundamentals-of-k8s","title":"Master the Fundamentals of K8s:\nKubernetes 101 video series with Jeff Geerling"},{"slug":"website-uptime-guarantees-explained","title":"Website Uptime Guarantees Explained"},{"slug":"how-to-scale-kubernetes-with-a-small-team","title":"How to scale Kubernetes with a small team"},{"slug":"welcome-to-discord-lagoon","title":"Welcome to Discord, Lagoon"},{"slug":"should-developers-have-to-do-kubernetes","title":"Should developers have to do Kubernetes?"},{"slug":"say-hi-to-bree-benesh","title":"Say hi to Bree Benesh – amazee.io’s new Sales Solutions Architect"},{"slug":"recap-2023-composablenow","title":"Recap 2023 – ComposableNow: The Future of the Open Web"},{"slug":"welcome-henk-beld","title":"Welcome our new Sales Solutions Architect, Henk Beld, to the amazee.io team"},{"slug":"why-developers-need-devops-as-a-service","title":"Why developers need DevOps-as-a-Service: A solution to Kubernetes management and developer burnout"},{"slug":"welcome-pedro-alagoa","title":"Welcome Pedro Alagoa, our newest Software Engineer"},{"slug":"welcome-deeksha-kini","title":"Meet amazee.io's new Systems Support Engineer – Deeksha Kini"},{"slug":"k8s-101-is-kubernetes-essential-for-developers","title":"K8s 101: Is Kubernetes essential for developers? Here’s how to start using it today"},{"slug":"how-to-get-support-from-amazee-io","title":"How to get support from amazee.io"},{"slug":"what-is-containerized-hosting","title":"What is containerized hosting?"},{"slug":"benefits-of-kubernetes-with-lagoon","title":"Reaping the Benefits of Kubernetes \n(with Lagoon)"},{"slug":"website-security-risks-in-2022","title":"Which website security risks do you really need to worry about in 2022?"},{"slug":"how-to-simplify-your-data-sovereignty-strategy","title":"How to simplify your data sovereignty strategy"},{"slug":"new-platform-engineer-brittany-mitchell","title":"Meet our new Platform Engineer – Brittany Mitchell"},{"slug":"annai-partnership-announcement","title":"amazee.io and ANNAI Inc. Partner to Bring Open Source PaaS to Japan"},{"slug":"drupaljam-2025-the-power-of-community","title":"Drupaljam 2025: Big Ideas, Bold Tech, and the Power of Community"},{"slug":"introducing-private-ai-at-drupalcon-atlanta","title":"Introducing Private AI at DrupalCon Atlanta"},{"slug":"ai-llm-data-privacy-protection","title":"AI and LLM Data Privacy and Data Sovereignty: Navigating the Challenges"},{"slug":"experience-the-power-of-drupal-ai-for-free","title":"Experience the power of Drupal AI for free"},{"slug":"drupalcon-barcelona-2024-team-recap","title":"DrupalCon Barcelona 2024 - Team Recap"},{"slug":"recap-drupal-govcon-2024","title":"Drupal GovCon 2024 Recap"},{"slug":"lagooncon-portland-2024-recap","title":"LagoonCon Portland 2024 Recap"},{"slug":"drupalcon-portland-2024-recap","title":"DrupalCon Portland 2024 in 1,800 Words"},{"slug":"soc2-type2-attestation-report-announcement","title":"amazee.io Achieves SOC 2 Type 2 Attestation - Our Ongoing Commitment to Enterprise-Level Security"},{"slug":"aws-tokyo-cloud-region","title":"amazee.io Launches New Tokyo Cloud Region on AWS"},{"slug":"amazee-io-bolsters-enterprise-level-security-with-iso-27001-security-standard-certification","title":"amazee.io Bolsters Enterprise-Level Security with ISO 27001 Security Standard Certification"},{"slug":"thriving-in-tech-removing-barriers-for-black-professionals","title":"Thriving in Tech: Removing Barriers for Black Professionals"},{"slug":"comparably-awards-honor-amazee-io","title":"Comparably awards honor our Perks and Benefits and Company Compensation at amazee.io"},{"slug":"drupalcon-amsterdam-2019-recap","title":"DrupalCon Amsterdam 2019 Recap"},{"slug":"aws-government-competency","title":"amazee.io Achieves AWS Government Competency"},{"slug":"soc2-type1-attestation-report-announcement","title":"amazee.io Proves Enhanced Enterprise-Level Security with SOC2 Type1 Attestation Report"},{"slug":"salsa-digital-and-amazee-io-secure-new-contract-with-the-australian-department-of-finance-for-govcms","title":"Salsa Digital and amazee.io secure new contract with the Australian Department of Finance for GovCMS"}]},"legacy":false,"slug":"live-webinar-secure-at-speed-with-fastly-edge-delivery","data":{"title":"Webinar: Secure at Speed with Fastly - Edge Delivery Without Compromise","meta_title":"Edge Security Webinar: Secure at Speed with Fastly","posted_on":"Jun 25, 2026","author_name":"Nicole Laine","author_image":"https://images.prismic.io/amazeeio/1c6600c7-ec77-4ee7-850c-6c563542f48b_Nicole-Laine.jpg?auto=format%2Ccompress","read_time":2,"tag":"News","faq":{"heading":null,"faq_items":[]},"body":[{"id":"7061f4af-6d4f-5ea3-aca1-1ba578e62ee7","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"\n\n ![\"A](\"https://images.prismic.io/amazeeio/ajzX5FbRV8_Qf2xn_amazee-io-fastly-webinar-edge-delivery-without-compromise-july-2026.jpg.jpg?auto=format,compress\")
\n
Learn how regulated and high-traffic organizations reduce security risks without sacrificing deployment speed using a modern managed edge layer.
","raw":[{"type":"paragraph","text":"Learn how regulated and high-traffic organizations reduce security risks without sacrificing deployment speed using a modern managed edge layer.","spans":[{"start":0,"end":144,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Learn how regulated and high-traffic organizations reduce security risks without sacrificing deployment speed using a modern managed edge layer. "}}},{"id":"f601c9a4-5d09-5b5f-91b5-99a7572dc861","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"🗓️ Date: July 22nd | July 23rd, 2026
⏰ Time: 3 PM PDT | 8 AM AEST
","raw":[{"type":"paragraph","text":"🗓️ Date: July 22nd | July 23rd, 2026","spans":[{"start":4,"end":8,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"⏰ Time: 3 PM PDT | 8 AM AEST","spans":[{"start":2,"end":6,"type":"strong"}],"direction":"ltr"}],"text":"🗓️ Date: July 22nd | July 23rd, 2026 ⏰ Time: 3 PM PDT | 8 AM AEST"}}},{"id":"3f9bfbfc-0f5e-5995-818f-619896a32aef","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Join our live session and learn how to improve speed, resilience, and security at the edge without adding operational overhead.
","raw":[{"type":"heading2","text":"Register Now to Save Your Spot!","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Join our live session and learn how to improve speed, resilience, and security at the edge without adding operational overhead.","spans":[],"direction":"ltr"}],"text":"Register Now to Save Your Spot! Join our live session and learn how to improve speed, resilience, and security at the edge without adding operational overhead."}}},{"id":"544cacef-94dd-5eb7-a5b4-c22a2e3e61ef","slice_type":"hubspot_form","slice_label":null,"primary":{"portal_id":"5096486","form_id":"1e22b1d8-e53e-46ed-91df-2b21214c8367"}},{"id":"67677346-ed43-5481-88be-24773543cd67","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"\n ![\"A](\"https://images.prismic.io/amazeeio/ajzDFFbRV8_Qf2j4_amazee-io-fastly-webinar-sean-hamlin-peter-scott-anz.png?auto=format,compress\")
\n
The core difference lies in the blast radius protection and the underlying infrastructure independence:
In an active-passive architecture, the recovery guardrails are defined by the frequency of data synchronization and the speed of network routing:
While staying within a single provider’s ecosystem (e.g., AWS Region A to AWS Region B) keeps operations simpler, it leaves an organization vulnerable to provider-wide systemic issues. Widespread identity management failures, global configuration errors, or API control-plane lockouts can simultaneously compromise all regions under a single hyperscaler.
A cross-cloud failover strategy (such as AWS to GCP or Azure to AWS) eliminates this shared dependency entirely, mitigating Cloud Concentration Risk and ensuring your platform stays online even during a global, provider-wide outage.
","raw":[{"type":"paragraph","text":"While staying within a single provider’s ecosystem (e.g., AWS Region A to AWS Region B) keeps operations simpler, it leaves an organization vulnerable to provider-wide systemic issues. Widespread identity management failures, global configuration errors, or API control-plane lockouts can simultaneously compromise all regions under a single hyperscaler.","spans":[{"start":315,"end":318,"type":"em"}],"direction":"ltr"},{"type":"paragraph","text":"A cross-cloud failover strategy (such as AWS to GCP or Azure to AWS) eliminates this shared dependency entirely, mitigating Cloud Concentration Risk and ensuring your platform stays online even during a global, provider-wide outage.","spans":[{"start":2,"end":31,"type":"strong"},{"start":124,"end":148,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"While staying within a single provider’s ecosystem (e.g., AWS Region A to AWS Region B) keeps operations simpler, it leaves an organization vulnerable to provider-wide systemic issues. Widespread identity management failures, global configuration errors, or API control-plane lockouts can simultaneously compromise all regions under a single hyperscaler. A cross-cloud failover strategy (such as AWS to GCP or Azure to AWS) eliminates this shared dependency entirely, mitigating Cloud Concentration Risk and ensuring your platform stays online even during a global, provider-wide outage. "}},{"faq_heading":"Why is the failback process to the primary cloud region handled manually instead of automatically?","faq_copy":{"html":"While failing over to a standby region is automated to reduce downtime (RTO), failing back to the primary region should always be a controlled, manual step in your Business Continuity Plan (BCP).
A manual rollback is critical for three reasons:
Multi-region failover should be evaluated as an investment in risk mitigation rather than a standard infrastructure markup. According to New Relic’s 2025 Observability Forecast, high-impact enterprise outages carry a median cost of $2 million per hour.
When building the business case, IT leaders should calculate the cost of a single hour of downtime relative to the baseline cost of a secondary shadow environment. Beyond direct transactional revenue losses, the justification anchors on preventing contractual SLA financial penalties, reducing emergency engineering strain, avoiding regulatory compliance failures, and protecting long-term brand equity and customer trust.
","raw":[{"type":"paragraph","text":"Multi-region failover should be evaluated as an investment in risk mitigation rather than a standard infrastructure markup. According to New Relic’s 2025 Observability Forecast, high-impact enterprise outages carry a median cost of $2 million per hour.","spans":[{"start":232,"end":251,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"When building the business case, IT leaders should calculate the cost of a single hour of downtime relative to the baseline cost of a secondary shadow environment. Beyond direct transactional revenue losses, the justification anchors on preventing contractual SLA financial penalties, reducing emergency engineering strain, avoiding regulatory compliance failures, and protecting long-term brand equity and customer trust.","spans":[],"direction":"ltr"}],"text":"Multi-region failover should be evaluated as an investment in risk mitigation rather than a standard infrastructure markup. According to New Relic’s 2025 Observability Forecast, high-impact enterprise outages carry a median cost of $2 million per hour. When building the business case, IT leaders should calculate the cost of a single hour of downtime relative to the baseline cost of a secondary shadow environment. Beyond direct transactional revenue losses, the justification anchors on preventing contractual SLA financial penalties, reducing emergency engineering strain, avoiding regulatory compliance failures, and protecting long-term brand equity and customer trust."}}]},"body":[{"id":"e6b738a6-6c9c-554c-8b04-f213630f0c1c","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"\n\n ![\"amazee.io](\"https://images.prismic.io/amazeeio/aibWaAeQX7-eW9_M_Multi-Region-Failover.jpg?auto=format,compress\")
\n
\n ![\"Multi-Region](\"https://images.prismic.io/amazeeio/aibc1weQX7-eW-Kk_Multi-RegionFailoverExplained3.gif?auto=format,compress\")
\n
If your website goes down, the impact is immediate: potential customers will go elsewhere, and some of them will never come back. Even if the outage is short, the knock-on effects can last for days: lost business, reputational damage, missed deadlines, and a backlog of work that competes with everything else you planned to ship.
","raw":[{"type":"paragraph","text":"If your website goes down, the impact is immediate: potential customers will go elsewhere, and some of them will never come back. Even if the outage is short, the knock-on effects can last for days: lost business, reputational damage, missed deadlines, and a backlog of work that competes with everything else you planned to ship.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"If your website goes down, the impact is immediate: potential customers will go elsewhere, and some of them will never come back. Even if the outage is short, the knock-on effects can last for days: lost business, reputational damage, missed deadlines, and a backlog of work that competes with everything else you planned to ship. "}}},{"id":"86a0b72a-6c2a-513c-a3f0-432a7703ee88","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Modern websites are built on layers of services that can fail in different ways. A problem in one layer can cascade quickly. Some of the most frustrating incidents are those outside your control, such as upstream cloud-provider disruptions or regional networking issues.
","raw":[{"type":"heading2","text":"Why Website Outages Happen","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Modern websites are built on layers of services that can fail in different ways. A problem in one layer can cascade quickly. Some of the most frustrating incidents are those outside your control, such as upstream cloud-provider disruptions or regional networking issues.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Why Website Outages Happen Modern websites are built on layers of services that can fail in different ways. A problem in one layer can cascade quickly. Some of the most frustrating incidents are those outside your control, such as upstream cloud-provider disruptions or regional networking issues. "}}},{"id":"2ed46822-3fde-5440-be36-800caf0cd055","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Failure is inevitable. No infrastructure is immune to failure, and resilient systems are designed with the expectation that outages will happen. Put into practice, resilience is about planning for the failures you can’t predict, and building systems that keep running even when parts of the stack are affected.
","raw":[{"type":"heading3","text":"Why Resilience Planning Matters","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Failure is inevitable. No infrastructure is immune to failure, and resilient systems are designed with the expectation that outages will happen. Put into practice, resilience is about planning for the failures you can’t predict, and building systems that keep running even when parts of the stack are affected.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Why Resilience Planning Matters Failure is inevitable. No infrastructure is immune to failure, and resilient systems are designed with the expectation that outages will happen. Put into practice, resilience is about planning for the failures you can’t predict, and building systems that keep running even when parts of the stack are affected. "}}},{"id":"a167a0fc-6ca0-526f-9bc2-0e4b3b60db8c","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Multi-region failover is designed for scenarios where staying inside a single cloud region is not enough. This can include regional outages, major platform incidents, or enterprise requirements that demand an independent “plan B” elsewhere.
At its core, multi-region failover means maintaining a secondary environment in a separate region (or even a separate provider) that can take over if the primary environment becomes unavailable.
","raw":[{"type":"heading2","text":"Multi-Region Failover: Continuity When a Whole Region is at Risk","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Multi-region failover is designed for scenarios where staying inside a single cloud region is not enough. This can include regional outages, major platform incidents, or enterprise requirements that demand an independent “plan B” elsewhere.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"At its core, multi-region failover means maintaining a secondary environment in a separate region (or even a separate provider) that can take over if the primary environment becomes unavailable.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Multi-Region Failover: Continuity When a Whole Region is at Risk Multi-region failover is designed for scenarios where staying inside a single cloud region is not enough. This can include regional outages, major platform incidents, or enterprise requirements that demand an independent “plan B” elsewhere. At its core, multi-region failover means maintaining a secondary environment in a separate region (or even a separate provider) that can take over if the primary environment becomes unavailable. "}}},{"id":"72aba751-e43a-5499-8704-695476701d07","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Multi-region designs often accept a small window of potential data loss in exchange for keeping services available during major incidents. This is measured using two critical industry metrics:
","raw":[{"type":"heading3","text":"The Tradeoff: Availability vs. Data Currency (RPO vs. RTO)","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Multi-region designs often accept a small window of potential data loss in exchange for keeping services available during major incidents. This is measured using two critical industry metrics:","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"The Tradeoff: Availability vs. Data Currency (RPO vs. RTO) Multi-region designs often accept a small window of potential data loss in exchange for keeping services available during major incidents. This is measured using two critical industry metrics: "}}},{"id":"faffed7e-2730-5f1b-8a59-9ff999e99e78","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"For the vast majority of enterprise platforms, accepting a 15-minute RPO window is an incredibly worthwhile trade-off compared to hours-long site blackouts (high RTO), compounded financial losses, and severe contractual SLA penalties.
","raw":[{"type":"paragraph","text":"For the vast majority of enterprise platforms, accepting a 15-minute RPO window is an incredibly worthwhile trade-off compared to hours-long site blackouts (high RTO), compounded financial losses, and severe contractual SLA penalties.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"For the vast majority of enterprise platforms, accepting a 15-minute RPO window is an incredibly worthwhile trade-off compared to hours-long site blackouts (high RTO), compounded financial losses, and severe contractual SLA penalties. "}}},{"id":"8bb80ca3-9cbe-5709-9944-5c34619f7e58","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Multi-zone resilience protects you from failures within a single region, such as an Availability Zone (AZ) disruption. Multi-region failover is intended for larger scenarios, where the region itself is affected or where continuity requirements demand independence from a single regional footprint.
If your availability requirements are strict, you usually want both layers: multi-zone as your baseline, and multi-region for business continuity.
","raw":[{"type":"heading3","text":"Multi-Zone vs Multi-Region","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Multi-zone resilience protects you from failures within a single region, such as an Availability Zone (AZ) disruption. Multi-region failover is intended for larger scenarios, where the region itself is affected or where continuity requirements demand independence from a single regional footprint.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"If your availability requirements are strict, you usually want both layers: multi-zone as your baseline, and multi-region for business continuity.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Multi-Zone vs Multi-Region Multi-zone resilience protects you from failures within a single region, such as an Availability Zone (AZ) disruption. Multi-region failover is intended for larger scenarios, where the region itself is affected or where continuity requirements demand independence from a single regional footprint. If your availability requirements are strict, you usually want both layers: multi-zone as your baseline, and multi-region for business continuity. "}}},{"id":"c087490e-9463-539b-8435-53c6e298db30","slice_type":"raw_html","slice_label":null,"primary":{"html_content":{"html":"<table class="tg"> <thead> <tr> <th class="tg-0pky"><span style="font-weight:bold">Capability</span></th> <th class="tg-0pky"><span style="font-weight:bold">Multi-Zone Resilience (Baseline HA)</span></th> <th class="tg-0pky"><span style="font-weight:bold">Multi-Region Failover (Disaster Recovery)</span></th> </tr> </thead> <tbody> <tr> <td class="tg-0pky"><span style="font-weight:bold">Blast Radius Protection</span></td> <td class="tg-0pky">Localized data center failure (Single AZ)</td> <td class="tg-0pky">Complete regional collapse or provider outage</td> </tr> <tr> <td class="tg-0pky"><span style="font-weight:bold">Geographic Separation</span></td> <td class="tg-0pky">Minimal (Typically within the same metropolitan area)</td> <td class="tg-0pky">High (Hundreds or thousands of miles apart)</td> </tr> <tr> <td class="tg-0pky"><span style="font-weight:bold">Infrastructure Footprint</span></td> <td class="tg-0pky">Shared regional control planes and network backbones</td> <td class="tg-0pky">Completely separate regional infrastructure / Cross-Cloud</td> </tr> <tr> <td class="tg-0pky"><span style="font-weight:bold">Cost & Complexity</span></td> <td class="tg-0pky">Low (Typically built into modern container platforms)</td> <td class="tg-0pky">Higher (Requires data synchronization & edge routing)</td> </tr> </tbody> </table>
","raw":[{"type":"paragraph","text":"| Capability | Multi-Zone Resilience (Baseline HA) | Multi-Region Failover (Disaster Recovery) |
|---|---|---|
| Blast Radius Protection | Localized data center failure (Single AZ) | Complete regional collapse or provider outage |
| Geographic Separation | Minimal (Typically within the same metropolitan area) | High (Hundreds or thousands of miles apart) |
| Infrastructure Footprint | Shared regional control planes and network backbones | Completely separate regional infrastructure / Cross-Cloud |
| Cost & Complexity | Low (Typically built into modern container platforms) | Higher (Requires data synchronization & edge routing) |
| Capability | Multi-Zone Resilience (Baseline HA) | Multi-Region Failover (Disaster Recovery) |
|---|---|---|
| Blast Radius Protection | Localized data center failure (Single AZ) | Complete regional collapse or provider outage |
| Geographic Separation | Minimal (Typically within the same metropolitan area) | High (Hundreds or thousands of miles apart) |
| Infrastructure Footprint | Shared regional control planes and network backbones | Completely separate regional infrastructure / Cross-Cloud |
| Cost & Complexity | Low (Typically built into modern container platforms) | Higher (Requires data synchronization & edge routing) |
That’s the context in which amazee.io builds failover into the platform. We aim to reduce the likelihood that infrastructure incidents become customer-visible events and make recovery predictable when the incident spans more than a single zone.
We deliver resilience in two layers: multi-zone failover by default, and multi-region failover as an advanced add-on for organizations that need continuity across multiple regions.
","raw":[{"type":"paragraph","text":"That’s the context in which amazee.io builds failover into the platform. We aim to reduce the likelihood that infrastructure incidents become customer-visible events and make recovery predictable when the incident spans more than a single zone.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"We deliver resilience in two layers: multi-zone failover by default, and multi-region failover as an advanced add-on for organizations that need continuity across multiple regions.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"That’s the context in which amazee.io builds failover into the platform. We aim to reduce the likelihood that infrastructure incidents become customer-visible events and make recovery predictable when the incident spans more than a single zone. We deliver resilience in two layers: multi-zone failover by default, and multi-region failover as an advanced add-on for organizations that need continuity across multiple regions. "}}},{"id":"225fd278-c5e6-56d6-9f1f-87fadf0e5fed","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Most major hyperscaler regions (AWS, GCP, Azure) contain three or more isolated Availability Zones (AZs). amazee.io automatically distributes workloads across all AZs in a region, so if one AZ fails, your sites can stay live.
What you get:
","raw":[{"type":"heading3","text":"Built-In Resilience: Multi-Zone Failover by Default","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Most major hyperscaler regions (AWS, GCP, Azure) contain three or more isolated Availability Zones (AZs). amazee.io automatically distributes workloads across all AZs in a region, so if one AZ fails, your sites can stay live.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"What you get:","spans":[],"direction":"ltr"}],"text":"Built-In Resilience: Multi-Zone Failover by Default Most major hyperscaler regions (AWS, GCP, Azure) contain three or more isolated Availability Zones (AZs). amazee.io automatically distributes workloads across all AZs in a region, so if one AZ fails, your sites can stay live. What you get:"}}},{"id":"0b7f1c81-34ff-51ab-9ea9-1ce45a5a4166","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"We offer multi-region failover as an advanced add-on, enabling:
","raw":[{"type":"heading3","text":"Multi-Region Failover with amazee.io: Continuity Beyond One Region","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"We offer multi-region failover as an advanced add-on, enabling:","spans":[],"direction":"ltr"}],"text":"Multi-Region Failover with amazee.io: Continuity Beyond One Region We offer multi-region failover as an advanced add-on, enabling:"}}},{"id":"c3d5cf13-ea28-5108-b58b-5351d6d50268","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Downtime is expensive, even before you factor in lost revenue. Incident response can pull senior engineers into urgent work, customer-facing teams need to manage incoming support requests, and internal roadmaps often stall while teams focus on recovery.
Data shows that the financial impact of outages is significant and growing. According to New Relic’s 2025 Observability Forecast, high-impact outages cost organizations a median of $2 million per hour, with some industries reporting even higher figures depending on regulatory and operational complexity.
Depending on how crucial your website is to revenue and operations, downtime losses may range from thousands to hundreds of thousands of dollars per minute.
","raw":[{"type":"paragraph","text":"Downtime is expensive, even before you factor in lost revenue. Incident response can pull senior engineers into urgent work, customer-facing teams need to manage incoming support requests, and internal roadmaps often stall while teams focus on recovery.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Data shows that the financial impact of outages is significant and growing. According to New Relic’s 2025 Observability Forecast, high-impact outages cost organizations a median of $2 million per hour, with some industries reporting even higher figures depending on regulatory and operational complexity.","spans":[{"start":89,"end":128,"type":"hyperlink","data":{"link_type":"Web","url":"https://newrelic.com/press-release/20250917","target":"_blank"}},{"start":89,"end":128,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"Depending on how crucial your website is to revenue and operations, downtime losses may range from thousands to hundreds of thousands of dollars per minute.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Downtime is expensive, even before you factor in lost revenue. Incident response can pull senior engineers into urgent work, customer-facing teams need to manage incoming support requests, and internal roadmaps often stall while teams focus on recovery. Data shows that the financial impact of outages is significant and growing. According to New Relic’s 2025 Observability Forecast, high-impact outages cost organizations a median of $2 million per hour, with some industries reporting even higher figures depending on regulatory and operational complexity. Depending on how crucial your website is to revenue and operations, downtime losses may range from thousands to hundreds of thousands of dollars per minute. "}}},{"id":"51ee2d06-e9a9-5ab8-ae88-fb919a2b96d6","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"The financial impact of downtime is only part of the picture. Organizations also face:
","raw":[{"type":"heading3","text":"The Costs Go Beyond Revenue","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"The financial impact of downtime is only part of the picture. Organizations also face:","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"The Costs Go Beyond Revenue The financial impact of downtime is only part of the picture. Organizations also face: "}}},{"id":"435e12e6-b8f8-582b-ba01-907463cce7c7","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"As systems become more distributed and dependent on external services, the cost of recovery effort often becomes as significant as the outage itself.
","raw":[{"type":"paragraph","text":"As systems become more distributed and dependent on external services, the cost of recovery effort often becomes as significant as the outage itself.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"As systems become more distributed and dependent on external services, the cost of recovery effort often becomes as significant as the outage itself. "}}},{"id":"6bf17731-1016-5dcc-8a86-1e6098450890","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"This is why multi-region failover is often evaluated less as a technical upgrade and more as an investment in business continuity. The objective is not simply to improve infrastructure resilience, but to reduce the operational, financial, and reputational impact of major outages when they occur.
","raw":[{"type":"heading3","text":"Why Multi-Region Failover Is a Business Decision","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"This is why multi-region failover is often evaluated less as a technical upgrade and more as an investment in business continuity. The objective is not simply to improve infrastructure resilience, but to reduce the operational, financial, and reputational impact of major outages when they occur.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Why Multi-Region Failover Is a Business Decision This is why multi-region failover is often evaluated less as a technical upgrade and more as an investment in business continuity. The objective is not simply to improve infrastructure resilience, but to reduce the operational, financial, and reputational impact of major outages when they occur. "}}},{"id":"9d08ba25-b966-5715-ad37-9ce475093cb2","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"What's one hour of downtime worth to your organization? If website availability is critical to revenue, compliance, or public access, it's worth evaluating your recovery strategy before the next incident occurs.
Our team can assess your resilience requirements and show you how amazee.io helps keep critical websites online during major infrastructure disruptions.
","raw":[{"type":"paragraph","text":"What's one hour of downtime worth to your organization? If website availability is critical to revenue, compliance, or public access, it's worth evaluating your recovery strategy before the next incident occurs.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Our team can assess your resilience requirements and show you how amazee.io helps keep critical websites online during major infrastructure disruptions.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Talk to our Experts","spans":[{"start":0,"end":19,"type":"hyperlink","data":{"link_type":"Web","url":"https://www.amazee.io/get-in-touch","target":"_blank"}},{"start":0,"end":19,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"What's one hour of downtime worth to your organization? If website availability is critical to revenue, compliance, or public access, it's worth evaluating your recovery strategy before the next incident occurs. Our team can assess your resilience requirements and show you how amazee.io helps keep critical websites online during major infrastructure disruptions. Talk to our Experts "}}},{"id":"9c510c70-a6e4-55ee-88ae-ef2057e86594","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"👓 Fault-Tolerant Enterprise Hosting
👓 Beyond Uptime: Why Fully Managed Secured Data Hosting is Your Best Defense Against Security Risks
","raw":[{"type":"heading2","text":"Additional Resources","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"👓 Fault-Tolerant Enterprise Hosting","spans":[{"start":3,"end":36,"type":"hyperlink","data":{"link_type":"Web","url":"https://www.amazee.io/blog/post/fault-tolerant-enterprise-hosting","target":"_blank"}},{"start":3,"end":36,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"👓 Beyond Uptime: Why Fully Managed Secured Data Hosting is Your Best Defense Against Security Risks","spans":[{"start":3,"end":100,"type":"hyperlink","data":{"link_type":"Web","url":"https://www.amazee.io/blog/post/fully-managed-secured-data-hosting-service","target":"_blank"}},{"start":3,"end":100,"type":"strong"}],"direction":"ltr"}],"text":"Additional Resources 👓 Fault-Tolerant Enterprise Hosting 👓 Beyond Uptime: Why Fully Managed Secured Data Hosting is Your Best Defense Against Security Risks"}}}],"summary":"Website outages cost a median of $2M per hour. Discover how our multi-region failover delivers an automated 15-minute RPO across AWS, GCP, and Azure","canonical_url":null,"unlisted":false,"calendar_title":null,"calendar_embed":{"url":""},"calender_heading":null,"calender_subheading":null,"calender_body":{"html":"","raw":[],"text":""},"calender_image":{"url":null,"alt":null},"images":[{"path":"https://images.prismic.io/amazeeio/aibWaAeQX7-eW9_M_Multi-Region-Failover.jpg?auto=format%2Ccompress"}]}},{"topLevelBlogData":{"tags":[{"slug":"news","name":"News","include_in_header":true},{"slug":"tips-tricks","name":"Knowledge Base","include_in_header":true},{"slug":"culture","name":"Culture","include_in_header":true},{"slug":"success-stories","name":"Success Stories","include_in_header":false},{"slug":"roadmap","name":"Lagoon Roadmap","include_in_header":false},{"slug":"events","name":"Events","include_in_header":true}],"availablePrismicBlogs":[{"slug":"women-in-tech-brittany-mitchell","title":"Women in Tech - Q&A with Brittany Mitchell, Platform Engineer"},{"slug":"multi-region-failover-explained-cross-cloud-resilience","title":"Multi-Region Failover: Cross-Cloud Resilience Explained"},{"slug":"women-in-tech-lauren-morris","title":"Women in Tech - Q&A with Lauren Morris, Head of Product"},{"slug":"women-in-tech-nicole-ritchie","title":"Women in Tech - Q&A with Nicole Ritchie, Customer Success Lead"},{"slug":"women-in-tech-bree-benesh","title":"Women in Tech - Q&A with Bree Benesh, Product Manager"},{"slug":"women-in-tech-deeksha-kini","title":"Women in Tech - Q&A with Deeksha Kini, Systems Support Engineer"},{"slug":"dependency-track-software-supply-chain-security","title":"Managed Dependency-Track: The 2026 Guide to Continuous Supply Chain Security"},{"slug":"drupal-dev-days-athens-2026-recap","title":"Drupal Dev Days Athens 2026: Vibe Coding, Ancient Hospitality, and the Future of Drupal"},{"slug":"byoc-bring-your-own-cloud-guide","title":"Bring Your Own Cloud (BYOC): The Hosting Architecture of Trust for 2026"},{"slug":"fault-tolerant-enterprise-hosting","title":"Fault-Tolerant Enterprise Hosting: From Self-Healing Infrastructure to Deployment Strategies That Never Fail"},{"slug":"ab-bark-road-playlist-2026","title":"Ab-bark Road – amazee.io Team Playlist 2026"},{"slug":"apm-and-observability","title":"APM and Observability: Essential Platforms for Modern Enterprises"},{"slug":"kitty-stardust-playlist-2025","title":"Kitty Stardust – amazee.io Team Playlist 2025"},{"slug":"fully-managed-secured-data-hosting-service","title":"Beyond Uptime: Why Fully Managed Secured Data Hosting is Your Best Defense Against Security Risks"},{"slug":"high-scalability-hosting-for-drupal-projects","title":"High Scalability Hosting for Your Enterprise Drupal Projects"},{"slug":"drupalcon-europe-2025-vienna-recap","title":"DrupalCon Europe 2025 - Vienna: Recap"},{"slug":"amazeeio-acquires-amazeelabs","title":"The amazee Reunion: amazee.io Acquires Amazee Labs, Reuniting Two Tech Powerhouses"},{"slug":"drupal-hosting-iso-27001-certification","title":"Your Enterprise Security Advantage: ISO/IEC 27001 Certified Drupal Hosting Excellence"},{"slug":"drupals-strategic-ai-initiative-our-commitment","title":"Our Commitment to Drupal’s Strategic AI Initiative"},{"slug":"introducing-brittany-bailey","title":"Welcome, Brittany Bailey, our new Delivery Manager"},{"slug":"introducing-lanette-miller","title":"Meet Lanette Miller, our new Technical Account Manager"},{"slug":"introducing-ryan-price","title":"Introducing Ryan Price, our new Technical Account Manager"},{"slug":"introducing-katywalsh","title":"Introducing Katy Walsh, our new Marketing Lead"},{"slug":"enterprise-drupal-migrations-done-right","title":"From Monoliths to Multi-Sites: Two Stories of Enterprise Drupal Website Migrations Done Right"},{"slug":"ddos-attack-mitigation-for-enterprises","title":"DDoS Attack Mitigation for Enterprises: Protect Your Digital Properties"},{"slug":"future-of-work-conference-2024-highlights","title":"Future of Work Conference 2024: Highlights and Key Takeaways"},{"slug":"headless-drupal-basics-for-enterprises","title":"Headless Drupal Basics For Modern Enterprises"},{"slug":"update-from-franz","title":"A personal update from Franz on stepping back from his role as CEO of amazee.io"},{"slug":"push-your-code-well-handle-the-rest","title":"Push Your Code. We’ll Handle The Rest."},{"slug":"data-pipelines-for-rag","title":"Data Pipelines for RAG"},{"slug":"building-a-private-llm-chatbot-learnings-insights","title":"Building a Private LLM Chatbot: Learning and Insights"},{"slug":"drupal-7-end-of-life","title":"Drupal 7 End of Life: How We Help"},{"slug":"introducing-dimitra-chatzichrysou","title":"Meet amazee.io’s new Platform Engineer, Dimitra Chatzichrysou"},{"slug":"welcome-karl-hepworth","title":"Welcome, Karl Hepworth, amazee.io’s new Platform Engineer"},{"slug":"lagoon-v220-release","title":"Lagoon V2.20 Release: New Features and Enhancements"},{"slug":"introducing-lauren-morris","title":"Welcome, Lauren Morris, Our New Product Manager at amazee.io!"},{"slug":"meet-glyn-davies","title":"Meet Glyn Davies, our new Platform Engineer!"},{"slug":"introducing-laura-caraker","title":"Introducing Laura Caraker, our new Sales Representative"},{"slug":"introducing-sailonlagoon","title":"Provision and Deploy Laravel on amazee.io - Introducing Sail:onLagoon"},{"slug":"building-a-private-llm-chatbot","title":"Building a Private LLM Chatbot from Technical Documentation: Challenges and Solutions"},{"slug":"what-is-green-web-hosting","title":"What is Green Web Hosting?"},{"slug":"cdn-waf-enhancing-protecting-your-website","title":"CDN + WAF: Enhancing and Protecting Your Website"},{"slug":"live-webinar-secure-at-speed-with-fastly-edge-delivery","title":"Webinar: Secure at Speed with Fastly - Edge Delivery Without Compromise"},{"slug":"automating-migrations-between-lagoon-clusters-and-embracing-managed-kubernetes","title":"Automating Migrations Between Lagoon Clusters, and Embracing Managed Kubernetes"},{"slug":"asynchronous-communication-in-a-globally-remote-team","title":"Asynchronous Communication in a Globally Remote Team"},{"slug":"a-new-home-and-platform-for-our-lagoon-documentation","title":"A New Home (and Platform) for Our Lagoon Documentation"},{"slug":"amazee-io-joins-aws-isv-accelerate-program","title":"amazee.io joins AWS ISV Accelerate Program to accelerate developer experience"},{"slug":"austin-sprint-week-recap","title":"Support for Native Kubernetes – Austin Sprint Week Recap"},{"slug":"amazeeio-now-available-in-aws-marketplace","title":"amazee.io – Now Available in AWS Marketplace"},{"slug":"amazee.io--a-worldwide-family","title":"amazee.io – a worldwide family"},{"slug":"amazee-io-joins-mirantis","title":"Taking steps to further improve the developer experience: amazee.io joins Mirantis"},{"slug":"amazee-io-recognized-with-aws-devops-software-competency","title":"amazee.io recognized with AWS DevOps Software Competency"},{"slug":"are-you-ready-for-drupalsouth-shorts","title":"Are you ready for DrupalSouth Shorts?"},{"slug":"amazee-io-virtual-birthday-panel","title":"Join us for amazee.io’s Virtual Birthday Panel!"},{"slug":"a-marketers-perspective-on-web-hosting","title":"A Marketer’s Perspective on Switching Hosting Providers"},{"slug":"5-key-reasons-more-businesses-are-relying-on-webops","title":"5 Key Reasons More Businesses are Relying on WebOps in 2022"},{"slug":"announcing-lando-integration-for-lagoon","title":"Announcing Lando Integration for Lagoon"},{"slug":"amazee-io-earns-high-performer-ranking","title":"amazee.io earns High Performer ranking in Web Hosting and Continuous Delivery on G2"},{"slug":"live-uncover-hidden-vulnerabilities-with-dependency-track","title":"Webinar: Uncover Hidden Vulnerabilities - Continuous Software Security with Dependency-Track"},{"slug":"sounds-like-team-spirit-playlist-2024","title":"Sounds Like Team Spirit – amazee.io Team Playlist 2024"},{"slug":"drupal-dxp-built-for-decoupled-enterprise-hosting","title":"Drupal: The DXP Built for Decoupled Enterprise Website Hosting"},{"slug":"why-enterprises-turn-to-private-ai-solutions","title":"Webinar: Why Smart Enterprises Are Turning to Private AI Solutions"},{"slug":"webinar-launch-drupal-ai-provider","title":"Webinar: Private Drupal AI Provider – From Demo to Launch"},{"slug":"drupalcon-na-2021-recap-the-amazee-io-sessions","title":"DrupalCon North America 2021 Recap: The amazee.io Sessions"},{"slug":"meet-brand-ambassador-jason-lewis","title":"Welcome Jason Lewis, our Brand Ambassador"},{"slug":"meet-matt-swann","title":"Meet Matt Swan, our new UX Product Designer"},{"slug":"welcome-jay-porter","title":"Meet Jay Porter, our Technical Account Manager"},{"slug":"webinar-recap-lagoon-insights","title":"Webinar Recap: Lagoon Insights"},{"slug":"say-hello-to-peter-wettstein","title":"Say hello to Peter, our new Technical Account Manager"},{"slug":"what-was-the-cwp-for-the-new-zealand-government-and-whats-next","title":"What was the CWP for the New Zealand Government — and what's next?"},{"slug":"lagoon-2-is-available-now","title":"Lagoon 2 is Available Now! Here’s What’s New"},{"slug":"welcome-bobby-our-new-technical-account-manager","title":"Meet Bobby Kindle, our Technical Account Manager"},{"slug":"webinar-recap-how-to-simplify-your-development-workflow","title":"Webinar Recap: How to simplify your development workflow with Lando and Lagoon"},{"slug":"were-going-to-drupalcon-global","title":"We’re going to DrupalCon Global — see you online!"},{"slug":"webinar-recap-blue-green-deployments-with-activestandby","title":"Webinar Recap: Blue-Green Deployments with Active/Standby on Lagoon"},{"slug":"get-to-know-a-tam-sean-hamlin","title":"Get to Know a Technical Account Management Lead: Sean Hamlin"},{"slug":"lagoon-insights-webinar","title":"Lagoon Insights webinar"},{"slug":"introducing-nicole-laine","title":"Introducing Nicole Laine, our Digital Marketing and Advertising Specialist!"},{"slug":"joint-webinar-recap-the-future-of-web-development","title":"Joint Webinar Recap: The Future of Web Development and Hosting"},{"slug":"joint-webinar-recap-advanced-lando-ing-with-lagoon","title":"Joint Webinar Recap: Advanced Lando-ing with Lagoon"},{"slug":"joint-webinar-devportal-as-a-service-enabled-by-amazeeio","title":"Joint Webinar - DevPortal as a Service, deployed wherever the customer needs it, enabled by amazee.io"},{"slug":"is-cloud-native-too-hard-to-hire-for","title":"Is cloud native too hard to hire for? amazee.io can help simplify the process. Here’s how."},{"slug":"drupalcon-europe-2020-speaker-video-replay","title":"DrupalCon Europe 2020 Speaker Video Replay"},{"slug":"welcome-to-the-team-jonathan-peter","title":"Welcome to the team, Jonathan Peter – our new IT LEAD!"},{"slug":"webinar-drupal-ai-private-by-design","title":"Webinar: AI for Drupal - Private-by-Design"},{"slug":"drupal-content-distribution-solutions","title":"Drupal Content Distribution Solutions"},{"slug":"composable-web-drupal-web-hosting-and-the-future-of-web-architectures","title":"Composable web: Drupal web hosting and the future of web architectures"},{"slug":"will-greener-hosting-help","title":"Will greener hosting help reduce my website’s carbon emissions?"},{"slug":"dedicated-cloud-an-introductory-guide","title":"Dedicated Cloud: An Introductory Guide to Hosting Drupal and Other Enterprise CMS Software"},{"slug":"join-us-in-welcoming-toby-bellwood--our-new-product","title":"Join us in welcoming Toby Bellwood – our new Product Lead!"},{"slug":"preparing-lagoon-for-drupal-9-launch-day","title":"Preparing Lagoon for Drupal 9 Launch Day"},{"slug":"lagoon-implements-active-standby-a-blue-green-deploy-solution","title":"Lagoon implements “Active/Standby” - A Blue-Green Deploy Solution"},{"slug":"badcamping-virtually-together","title":"BADCamping Virtually Together"},{"slug":"amazee-io-launches-agency-partner-program","title":"amazee.io launches first Agency Partner Program, creating reseller and referral opportunities for agencies around the world"},{"slug":"amazee.io-catalyst-cloud-sparks-panel-discussion","title":"Webinar Recap: How Governments Can Leverage Open Source and the Cloud"},{"slug":"join-amazee-io-at-new-zealand-techweek2021","title":"Join us at New Zealand Techweek2021"},{"slug":"webinar-data-sovereignty-enterprise-drupal-publishing-workflows","title":"Webinar: Drupal Publishing Workflows and Data Sovereignty"},{"slug":"webinar-recap-lagoon-2.0-deploy-into-kubernetes-and","title":"Webinar RECAP: Lagoon 2.0: Deploy into Kubernetes and more!"},{"slug":"meet-us-at-cloudfest-2022","title":"Meet Us At CloudFest 2022"},{"slug":"top-benefits-of-cicd-in-web-hosting","title":"Top benefits of CI/CD in web hosting - and what it means for developers"},{"slug":"the-best-hosting-solution","title":"The Best Enterprise Hosting Solution: Top 3 Things To Look For"},{"slug":"webinar-open-source-power-of-typo3","title":"Better Together: The Open Source Power of TYPO3 CMS and amazee.io"},{"slug":"if-spotify-can-go-down-is-anyone-safe","title":"If Spotify can go down, is anyone safe?"},{"slug":"composable-architecture-and-drupal","title":"Composable Architecture: Why Drupal should be part of your Solution"},{"slug":"introducing-blaize-kaye","title":"Introducing our new Developer Experience and CI/CD Engineer – Blaize Kaye"},{"slug":"smartsheet-dedicated-kubernetes-based-web-hosting","title":"Supporting enterprise SaaS demand with dedicated Kubernetes-based web hosting"},{"slug":"meet-our-new-bizops-lead-ingrid-talbot","title":"Meet Ingrid Talbot, our BizOps Lead"},{"slug":"acquia-site-factory-vs-amazee-io-paas","title":"Acquia Site Factory vs amazee.io PaaS: Why amazee.io has the multisite hosting advantage you need"},{"slug":"welcome-to-the-team-martin","title":"Meet Martin Schlögl, our Head of Sales"},{"slug":"taoti-creative-and-amazee.io-breaking-free-from-limits-to-deliver-more","title":"Taoti Creative - Delivering more for Customers | amazee.io"},{"slug":"lagoon-cli-an-essential-tool-for-managing-lagoon-sites","title":"Lagoon-CLI — an essential tool for managing Lagoon sites."},{"slug":"driven-by-a-global-pandemic-the-world-is-changing","title":"Supporting COVID-19 Response Efforts"},{"slug":"why-were-moving-to-managed-kubernetes","title":"Why we’re moving to Managed Kubernetes"},{"slug":"global-distributed-and-open-source","title":"Proud to be Global, Distributed, and Open Source"},{"slug":"say-hi-to-tobi-nehrlich","title":"Say hi to Tobi Nehrlich, amazee.io’s Platform Lead"},{"slug":"how-to-prepare-your-website-for-high-traffic-events","title":"Case Study: Züri Fäscht — How to Prepare Your Website for High-Traffic Events"},{"slug":"introducing-stephanie-ogozaly-solutions-marketing-manager","title":"Meet Stephanie Ogozaly, our Solutions Marketing Manager"},{"slug":"new-content-marketing-manager-sophia-harris","title":"Say hi to our new Content Marketing Manager – Sophia Harris"},{"slug":"joint-webinar---the-future-of-web-development-and-hosting","title":"Joint Webinar - The future of web development and hosting: how to build performance apps for the modern web"},{"slug":"how-a-global-pharma-company-cut-application-delivery-costs","title":"EKS Migration - Cut App Delivery Costs by 60% | amazee.io"},{"slug":"unlocking-the-power-of-platform-engineering","title":"What Is Platform Engineering | amazee.io"},{"slug":"talking-kubernetes-on-talking-drupal-podcast","title":"Talking Kubernetes on Talking Drupal Podcast"},{"slug":"gitops-vs-devops","title":"GitOps vs. DevOps - What they are and why they are better together"},{"slug":"survive-a-high-traffic-event","title":"7 Tips: How to Survive a High-Traffic Event"},{"slug":"we-are-going-to-drupalcon-north-america","title":"We’re going to DrupalCon North America, April 12–16"},{"slug":"supporting-students-during-uncertain-times","title":"Supporting Students During Uncertain Times"},{"slug":"what-is-zeroops","title":"What is ZeroOps? Solving Your DevOps Challenges"},{"slug":"were-sponsoring-drupalgov-2020-australia","title":"We're Sponsoring, Attending and Speaking at DrupalGov 2020 in Australia"},{"slug":"crank-it-up-the-amazee-io-2021-playlist","title":"Crank It Up: The amazee.io 2021 Playlist Has Arrived"},{"slug":"what-is-webops","title":"What is WebOps? How does it Solve your Hosting Problems?"},{"slug":"matterport-autoscaling-to-meet-peak-demand-with-amazee.io-support","title":"Matterport: Autoscaling to meet peak demand with amazee.io support"},{"slug":"how-one-saas-company-saved-70k-in-startup-costs","title":"How one SaaS company saved $70k in startup costs and went to market a year faster"},{"slug":"govcms-case-study-managing-increased-website-demand","title":"GovCMS Case Study: managing increased website demand during COVID-19"},{"slug":"upcoming-webinar-how-governments-can-leverage-open-source","title":"Upcoming Webinar: How Governments can Leverage Open Source and the Cloud"},{"slug":"html-to-pdf-with-gotenberg-hosted-on-lagoon","title":"HTML to PDF with Gotenberg Hosted on Lagoon"},{"slug":"uptime-monitoring-explained","title":"Uptime Monitoring Explained"},{"slug":"lagoon-2020-roadmap","title":"Lagoon 2020 Roadmap"},{"slug":"what-to-expect-in-lagoon-1-3-0","title":"What to expect in Lagoon 1.3.0"},{"slug":"platform-as-a-service-hitting-the-wall","title":"Platform-as-a-Service: Are you hitting the wall with your Enterprise Drupal Hosting?"},{"slug":"see-you-at-drupalsouth-shorts-2021","title":"We’ll see you at DrupalSouth Shorts 2021"},{"slug":"the-top-7-webops-questions-answered","title":"The Top 7 WebOps Questions Answered"},{"slug":"what-were-releasing-in-lagoon-1.6.0-not-just-drupal-9-compatibility","title":"What we're releasing in Lagoon 1.6.0 - (not just Drupal 9 compatibility)"},{"slug":"welcome-johnny-squardo","title":"Welcome our new Support Engineer, Johnny Squardo"},{"slug":"lagoon-examples-silverstripe-cms","title":"Lagoon examples - Silverstripe CMS"},{"slug":"a-large-credential-stuffing-attack","title":"A Large Credential Stuffing Attack - How We Respond and Mitigate"},{"slug":"simply-push-your-code","title":"“Simply push your code.” What does that mean, exactly?"},{"slug":"open-source-companies-navigating-challenges","title":"Open Source Companies: Navigating Challenges and Building a Business on Open Source"},{"slug":"a-day-in-the-life-inside-lagoon-a-step-by-step-tutorial","title":"A day in the life inside Lagoon: A step-by-step tutorial demo"},{"slug":"amazeeio-is-now-a-kubernetes-certified-service-provider","title":"amazee.io is now a Kubernetes Certified Service Provider (KCSP)"},{"slug":"what-we-released-in-lagoon-1.9----the-ones-before","title":"What we released in Lagoon 1.9 – the one(s) before two"},{"slug":"white-paper-what-is-ci-cd","title":"What is CI/CD? A Primer on Continuous Integration and Continuous Delivery"},{"slug":"lando-and-lagoon-webinar","title":"Webinar: Simplifying your development workflow with Lando and Lagoon"},{"slug":"drupalgov-2020-sessions-recap","title":"DrupalGov 2020 Sessions Recap"},{"slug":"drupal-govcon-2020--here-we-come","title":"Drupal GovCon 2020 – Here We Come!"},{"slug":"a-warm-amazee.io-welcome-to-salvatore-pappalardo","title":"A warm amazee.io welcome to Salvatore Pappalardo – our new Systems Engineer"},{"slug":"amazee-io-as-your-composable-web-platform","title":"amazee.io as your composable web platform"},{"slug":"life-as-a-systems-engineer-at-amazee.io","title":"Life as a Systems Engineer at amazee.io"},{"slug":"lagoon-2.0-vision--what-were-working-on","title":"Lagoon 2.0 Vision – What We’re Working On"},{"slug":"joint-webinar-recap-developer-portals-as-a-service","title":"Joint Webinar Recap: Developer Portals as a Service, enabled by amazee.io"},{"slug":"see-you-at-drupalcon-europe-2020","title":"See You at DrupalCon Europe 2020"},{"slug":"our-new-partner-manager-bryan-gruneberg","title":"Meet our new Partner Manager — Bryan Gruneberg!"},{"slug":"meet-our-new-product-designer--ac-cowart","title":"Meet our new Product Designer – AC Cowart!"},{"slug":"powered-by-lagoon-managing-countless-csp-violations","title":"Powered by Lagoon: Managing countless CSP violations using amazee.io's platform flexibility"},{"slug":"recap-the-first-ever-lagooncon","title":"Recap – The first-ever LagoonCon"},{"slug":"podcast-joining-an-open-source-start-up-to-scale-growth","title":"Podcast: Joining an Open Source Start-Up to Scale Growth"},{"slug":"what-arrived-in-lagoon-1.8.x--a-release-in-three-movements","title":"What arrived in Lagoon 1.8.x – a release in three movements"},{"slug":"origins-of-lagoon-drupaleasy-interview-with-michael-schmid","title":"Origins of Lagoon - Interview with Michael Schmid on Drupal Easy"},{"slug":"developerweek-global-cloud-2021","title":"We’ll be at DeveloperWeek Global: Cloud, September 14-15"},{"slug":"our-drupalcon-global-recap","title":"Our DrupalCon Global Recap"},{"slug":"learn-containers-5-minutes-at-a-time-a-preview","title":"Learn containers 5 minutes at a time: A preview"},{"slug":"office-hours","title":"Office Hours"},{"slug":"lagoon-hacktoberfest-2020-call-for-more-examples","title":"Lagoon Hacktoberfest 2020 – call for more examples!"},{"slug":"what-were-releasing-in-lagoon-1.7.0","title":"What we're releasing in Lagoon 1.7.0"},{"slug":"ceo-franz-karlsberger-takes-the-reins","title":"CEO Franz Karlsberger takes the reins"},{"slug":"webinar-how-to-run-blue-green-deployments-with-active-standby-on-lagoon","title":"Webinar: How to Run Blue-Green Deployments with Active/Standby on Lagoon"},{"slug":"why-we-use-and-recommend-lens-for-kubernetes","title":"Here’s why we use and recommend Lens for Kubernetes"},{"slug":"women-in-tech-spotlight-interview-witb-dania-gerhardt-co-founder-of-amazee-group","title":"Women in Tech Spotlight: Interview with Dania Gerhardt, Co-Founder of Amazee Group"},{"slug":"gitlab-contribution","title":"GitLab Contribution"},{"slug":"webinar-on-lagoon-2-0-deploy-into-kubernetes-and-more","title":"Webinar on Lagoon 2.0 — Deploy into Kubernetes and more!"},{"slug":"exploring-self-managed-kubernetes-heres-what-to-consider","title":"Exploring Self-Managed Kubernetes? Here’s what to consider:"},{"slug":"what-we-released-in-lagoon-1.5.0","title":"What we released in Lagoon 1.5.0"},{"slug":"what-we-released-in-lagoon-1.4.0-and-1.4.1","title":"What we released in Lagoon 1.4.0 (and 1.4.1)"},{"slug":"how-can-we-preserve-developers-freedom","title":"How can we preserve developers’ freedom? And other questions with amazee.io"},{"slug":"what-are-the-benefits-of-using-open-source-software","title":"What are the benefits of using open source software? And other questions with amazee.io"},{"slug":"drupalcon-highlights-video-another-great-year-of-open-source-events","title":"DrupalCon Highlights Video: Another Great Year of Open Source Events"},{"slug":"part-2-how-secure-are-you-in-2022","title":"Part 2: How secure are you in 2022?"},{"slug":"welcome-to-the-team-nicole-ritchie","title":"Welcome to the team, Nicole Richie!"},{"slug":"after-ten-years-as-a-back-end-developer-alanna-decided","title":"A warm amazee.io welcome to Alanna Burke, our new expert on Documentation, Training, and Developer Relations!"},{"slug":"joint-webinar-advanced-lando-ing-with-lagoon","title":"Joint Webinar: Advanced Lando-ing with Lagoon"},{"slug":"what-you-need-to-know-about-open-source-software-and-webops","title":"What you need to know about open source software and DevOps"},{"slug":"meet-us-at-drupalcon-europe-2021","title":"Meet us at DrupalCon Europe 2021"},{"slug":"your-workflow-your-way","title":"Your workflow, your way: Leveraging the Lagoon API for custom CI/CD pipelines & development workflows"},{"slug":"say-hi-to-martina-augurio","title":"Meet Martina Augurio, our Client Engagement Manager"},{"slug":"visit-our-booth-at-drupal-govcon-2021","title":"Visit our booth at Drupal GovCon 2021"},{"slug":"welcome-chris-goodwin","title":"Meet Chris Goodwin, our Software Engineer"},{"slug":"what-is-dedicated-cloud-and-why-you-should-move-to-it","title":"What is Dedicated Cloud? And Why You Should Move to It"},{"slug":"our-highlights-from-new-zealand-techweek2021","title":"Our highlights from New Zealand Techweek2021"},{"slug":"what-is-a-content-delivery-network-cdn","title":"What is a Content Delivery Network (CDN) – and why do you need one?"},{"slug":"watch-now-amazee-io-at-drupalsouth-shorts-2021","title":"Watch Now: amazee.io at DrupalSouth ‘Shorts’ 2021"},{"slug":"introducing-rolando-scott","title":"Meet Rolando Scott, our Technical Account Manager"},{"slug":"welcome-to-amazee-io-mihaela","title":"Meet Mihaela Gheorghe, our Support Engineer"},{"slug":"celebrating-5-years-of-making-developers-lives-easier","title":"Celebrating 5 years of Making Developers’ Lives Easier"},{"slug":"welcome-ashleigh-king","title":"Meet Ashleigh King, our Client Engagement Manager"},{"slug":"join-our-drupal4gov-september-webinar","title":"Join our Drupal4Gov webinar on how to survive high-traffic events"},{"slug":"welcome-cezary-rataj","title":"Welcome Cezary Rataj, our new Delivery Lead at amazee.io!"},{"slug":"master-the-fundamentals-of-k8s","title":"Master the Fundamentals of K8s:\nKubernetes 101 video series with Jeff Geerling"},{"slug":"website-uptime-guarantees-explained","title":"Website Uptime Guarantees Explained"},{"slug":"how-to-scale-kubernetes-with-a-small-team","title":"How to scale Kubernetes with a small team"},{"slug":"welcome-to-discord-lagoon","title":"Welcome to Discord, Lagoon"},{"slug":"should-developers-have-to-do-kubernetes","title":"Should developers have to do Kubernetes?"},{"slug":"say-hi-to-bree-benesh","title":"Say hi to Bree Benesh – amazee.io’s new Sales Solutions Architect"},{"slug":"recap-2023-composablenow","title":"Recap 2023 – ComposableNow: The Future of the Open Web"},{"slug":"welcome-henk-beld","title":"Welcome our new Sales Solutions Architect, Henk Beld, to the amazee.io team"},{"slug":"why-developers-need-devops-as-a-service","title":"Why developers need DevOps-as-a-Service: A solution to Kubernetes management and developer burnout"},{"slug":"welcome-pedro-alagoa","title":"Welcome Pedro Alagoa, our newest Software Engineer"},{"slug":"welcome-deeksha-kini","title":"Meet amazee.io's new Systems Support Engineer – Deeksha Kini"},{"slug":"k8s-101-is-kubernetes-essential-for-developers","title":"K8s 101: Is Kubernetes essential for developers? Here’s how to start using it today"},{"slug":"how-to-get-support-from-amazee-io","title":"How to get support from amazee.io"},{"slug":"what-is-containerized-hosting","title":"What is containerized hosting?"},{"slug":"benefits-of-kubernetes-with-lagoon","title":"Reaping the Benefits of Kubernetes \n(with Lagoon)"},{"slug":"website-security-risks-in-2022","title":"Which website security risks do you really need to worry about in 2022?"},{"slug":"how-to-simplify-your-data-sovereignty-strategy","title":"How to simplify your data sovereignty strategy"},{"slug":"new-platform-engineer-brittany-mitchell","title":"Meet our new Platform Engineer – Brittany Mitchell"},{"slug":"annai-partnership-announcement","title":"amazee.io and ANNAI Inc. Partner to Bring Open Source PaaS to Japan"},{"slug":"drupaljam-2025-the-power-of-community","title":"Drupaljam 2025: Big Ideas, Bold Tech, and the Power of Community"},{"slug":"introducing-private-ai-at-drupalcon-atlanta","title":"Introducing Private AI at DrupalCon Atlanta"},{"slug":"ai-llm-data-privacy-protection","title":"AI and LLM Data Privacy and Data Sovereignty: Navigating the Challenges"},{"slug":"experience-the-power-of-drupal-ai-for-free","title":"Experience the power of Drupal AI for free"},{"slug":"drupalcon-barcelona-2024-team-recap","title":"DrupalCon Barcelona 2024 - Team Recap"},{"slug":"recap-drupal-govcon-2024","title":"Drupal GovCon 2024 Recap"},{"slug":"lagooncon-portland-2024-recap","title":"LagoonCon Portland 2024 Recap"},{"slug":"drupalcon-portland-2024-recap","title":"DrupalCon Portland 2024 in 1,800 Words"},{"slug":"soc2-type2-attestation-report-announcement","title":"amazee.io Achieves SOC 2 Type 2 Attestation - Our Ongoing Commitment to Enterprise-Level Security"},{"slug":"aws-tokyo-cloud-region","title":"amazee.io Launches New Tokyo Cloud Region on AWS"},{"slug":"amazee-io-bolsters-enterprise-level-security-with-iso-27001-security-standard-certification","title":"amazee.io Bolsters Enterprise-Level Security with ISO 27001 Security Standard Certification"},{"slug":"thriving-in-tech-removing-barriers-for-black-professionals","title":"Thriving in Tech: Removing Barriers for Black Professionals"},{"slug":"comparably-awards-honor-amazee-io","title":"Comparably awards honor our Perks and Benefits and Company Compensation at amazee.io"},{"slug":"drupalcon-amsterdam-2019-recap","title":"DrupalCon Amsterdam 2019 Recap"},{"slug":"aws-government-competency","title":"amazee.io Achieves AWS Government Competency"},{"slug":"soc2-type1-attestation-report-announcement","title":"amazee.io Proves Enhanced Enterprise-Level Security with SOC2 Type1 Attestation Report"},{"slug":"salsa-digital-and-amazee-io-secure-new-contract-with-the-australian-department-of-finance-for-govcms","title":"Salsa Digital and amazee.io secure new contract with the Australian Department of Finance for GovCMS"}]},"legacy":false,"slug":"dependency-track-software-supply-chain-security","data":{"title":"Managed Dependency-Track: The 2026 Guide to Continuous Supply Chain Security","meta_title":"Managed Dependency-Track: Supply Chain Security in 2026","posted_on":"May 20, 2026","author_name":"Bree Benesh","author_image":"https://images.prismic.io/amazeeio/148378f3-3cfd-4007-bea3-c3d4126dd6d8_Bree.jpg?auto=compress%2Cformat","read_time":8,"tag":"Knowledge Base","faq":{"heading":"Frequently Asked Questions","faq_items":[{"faq_heading":"What is the core purpose of a software bill of materials (SBOM) management system?","faq_copy":{"html":"The core purpose of an SBOM management system (such as Dependency-Track) is to serve as a centralized, continuous inventory and vulnerability-matching engine for an organization’s entire software portfolio. Unlike standard, isolated security scanners that look at individual code repositories one by one, an SBOM management system provides fleet-wide visibility by:
Getting started with open source SBOM tooling requires a simple three-step approach: generation and management.
Choose a Generation Tool: Integrate an open source SBOM generator like Syft or Trivy into your local command-line interface or development environment. For PHP containers, Syft is the better choice due to its more robust component detection. Run a basic command to scan your container image (e.g., `syft local-container-name -o cyclonedx-json > sbom.local-container-name.json`).
Standardize the Format: Ensure your generation tool outputs data in an industry-standard, machine-readable format, ideally CycloneDX or SPDX, so different security platforms can read the inventory seamlessly.
Select a Management Layer: For an individual project, reading the raw JSON output is sufficient. However, as soon as you manage multiple applications, you will need to point those generated files to an open-source aggregation platform like Dependency-Track to start tracking vulnerabilities continuously.
","raw":[{"type":"paragraph","text":"Getting started with open source SBOM tooling requires a simple three-step approach: generation and management.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Choose a Generation Tool: Integrate an open source SBOM generator like Syft or Trivy into your local command-line interface or development environment. For PHP containers, Syft is the better choice due to its more robust component detection. Run a basic command to scan your container image (e.g., `syft local-container-name -o cyclonedx-json > sbom.local-container-name.json`).","spans":[{"start":0,"end":25,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Standardize the Format: Ensure your generation tool outputs data in an industry-standard, machine-readable format, ideally CycloneDX or SPDX, so different security platforms can read the inventory seamlessly.","spans":[{"start":0,"end":23,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Select a Management Layer: For an individual project, reading the raw JSON output is sufficient. However, as soon as you manage multiple applications, you will need to point those generated files to an open-source aggregation platform like Dependency-Track to start tracking vulnerabilities continuously.","spans":[{"start":0,"end":26,"type":"strong"}],"direction":"ltr"}],"text":"Getting started with open source SBOM tooling requires a simple three-step approach: generation and management. Choose a Generation Tool: Integrate an open source SBOM generator like Syft or Trivy into your local command-line interface or development environment. For PHP containers, Syft is the better choice due to its more robust component detection. Run a basic command to scan your container image (e.g., `syft local-container-name -o cyclonedx-json > sbom.local-container-name.json`). Standardize the Format: Ensure your generation tool outputs data in an industry-standard, machine-readable format, ideally CycloneDX or SPDX, so different security platforms can read the inventory seamlessly. Select a Management Layer: For an individual project, reading the raw JSON output is sufficient. However, as soon as you manage multiple applications, you will need to point those generated files to an open-source aggregation platform like Dependency-Track to start tracking vulnerabilities continuously."}},{"faq_heading":"How do you set up a dependency tracking tool for open-source components?","faq_copy":{"html":"Setting up an enterprise-grade dependency tracking tool via the self-managed (DIY) open-source path involves establishing three core architectural pillars:
The Hosting Environment: Provision the infrastructure required to run the core application stack. For a platform like Dependency-Track, this typically involves deploying a Java runtime environment alongside a highly optimized relational database, such as PostgreSQL, to handle intensive database queries.
The Intelligence Pipeline: Configure the platform to automatically pull from global vulnerability data streams, such as the GitHub Advisory Database, OSV, and the National Vulnerability Database (NVD).
The Day-Two Operational Routine: To keep the platform healthy long-term, you must dedicate engineering time to manage database scaling, fine-tune query performance, apply regular Java framework patches, and ensure background data feeds do not time out.
","raw":[{"type":"paragraph","text":"Setting up an enterprise-grade dependency tracking tool via the self-managed (DIY) open-source path involves establishing three core architectural pillars:\n","spans":[],"direction":"ltr"},{"type":"paragraph","text":"The Hosting Environment: Provision the infrastructure required to run the core application stack. For a platform like Dependency-Track, this typically involves deploying a Java runtime environment alongside a highly optimized relational database, such as PostgreSQL, to handle intensive database queries.\n","spans":[{"start":0,"end":24,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"The Intelligence Pipeline: Configure the platform to automatically pull from global vulnerability data streams, such as the GitHub Advisory Database, OSV, and the National Vulnerability Database (NVD).\n","spans":[{"start":0,"end":26,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"The Day-Two Operational Routine: To keep the platform healthy long-term, you must dedicate engineering time to manage database scaling, fine-tune query performance, apply regular Java framework patches, and ensure background data feeds do not time out.","spans":[{"start":0,"end":32,"type":"strong"}],"direction":"ltr"}],"text":"Setting up an enterprise-grade dependency tracking tool via the self-managed (DIY) open-source path involves establishing three core architectural pillars:\n The Hosting Environment: Provision the infrastructure required to run the core application stack. For a platform like Dependency-Track, this typically involves deploying a Java runtime environment alongside a highly optimized relational database, such as PostgreSQL, to handle intensive database queries.\n The Intelligence Pipeline: Configure the platform to automatically pull from global vulnerability data streams, such as the GitHub Advisory Database, OSV, and the National Vulnerability Database (NVD).\n The Day-Two Operational Routine: To keep the platform healthy long-term, you must dedicate engineering time to manage database scaling, fine-tune query performance, apply regular Java framework patches, and ensure background data feeds do not time out."}},{"faq_heading":"What are the best practices for integrating a dependency vulnerability tracker into development workflows?","faq_copy":{"html":"To make a dependency vulnerability tracker operationally effective without disrupting software delivery teams, follow these industry best practices:
Dependency-Track bypasses the "NVD Gap", the critical window of time where the National Vulnerability Database delays processing and enriching new CVEs, by using Multi-Source Intelligence Aggregation.
Instead of relying on a single database, it continuously aggregates threat intelligence from alternative real-time feeds, including:
This multi-feed approach ensures that when a zero-day exploit emerges, your security team receives the necessary version-level visibility and remediation context within minutes, hours before the NVD completes its formal enrichment process.
","raw":[{"type":"paragraph","text":"Dependency-Track bypasses the \"NVD Gap\", the critical window of time where the National Vulnerability Database delays processing and enriching new CVEs, by using Multi-Source Intelligence Aggregation.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Instead of relying on a single database, it continuously aggregates threat intelligence from alternative real-time feeds, including:","spans":[],"direction":"ltr"},{"type":"list-item","text":"GitHub Advisory Database","spans":[],"direction":"ltr"},{"type":"list-item","text":"OSV (Open Source Vulnerability data)","spans":[],"direction":"ltr"},{"type":"list-item","text":"Snyk","spans":[],"direction":"ltr"},{"type":"paragraph","text":"This multi-feed approach ensures that when a zero-day exploit emerges, your security team receives the necessary version-level visibility and remediation context within minutes, hours before the NVD completes its formal enrichment process.","spans":[],"direction":"ltr"}],"text":"Dependency-Track bypasses the \"NVD Gap\", the critical window of time where the National Vulnerability Database delays processing and enriching new CVEs, by using Multi-Source Intelligence Aggregation. Instead of relying on a single database, it continuously aggregates threat intelligence from alternative real-time feeds, including: GitHub Advisory Database OSV (Open Source Vulnerability data) Snyk This multi-feed approach ensures that when a zero-day exploit emerges, your security team receives the necessary version-level visibility and remediation context within minutes, hours before the NVD completes its formal enrichment process."}},{"faq_heading":"What is the operational difference between CVSS, EPSS, and VEX in vulnerability triage?","faq_copy":{"html":"To eliminate alert fatigue across software fleets, Dependency-Track combines three distinct signals to separate basic findings from urgent threats:
Using these together allows security teams to verify what is present (CVSS), prioritize what is actively dangerous (EPSS), and dismiss the noise (VEX).
","raw":[{"type":"paragraph","text":"To eliminate alert fatigue across software fleets, Dependency-Track combines three distinct signals to separate basic findings from urgent threats:","spans":[],"direction":"ltr"},{"type":"list-item","text":"CVSS (Common Vulnerability Scoring System): Measures the theoretical severity and potential impact of a vulnerability if fully exploited.","spans":[{"start":0,"end":42,"type":"strong"}],"direction":"ltr"},{"type":"list-item","text":"EPSS (Exploit Prediction Scoring System): Measures the real-world likelihood that a vulnerability will actually be exploited in the wild, helping teams prioritize their actual backlogs.","spans":[{"start":0,"end":40,"type":"strong"}],"direction":"ltr"},{"type":"list-item","text":"VEX (Vulnerability Exploitability eXchange): A documentation standard that allows your team to declare a vulnerability as non-exploitable because the underlying vulnerable code path is not reachable within your specific application context.","spans":[{"start":0,"end":43,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"Using these together allows security teams to verify what is present (CVSS), prioritize what is actively dangerous (EPSS), and dismiss the noise (VEX).","spans":[],"direction":"ltr"}],"text":"To eliminate alert fatigue across software fleets, Dependency-Track combines three distinct signals to separate basic findings from urgent threats: CVSS (Common Vulnerability Scoring System): Measures the theoretical severity and potential impact of a vulnerability if fully exploited. EPSS (Exploit Prediction Scoring System): Measures the real-world likelihood that a vulnerability will actually be exploited in the wild, helping teams prioritize their actual backlogs. VEX (Vulnerability Exploitability eXchange): A documentation standard that allows your team to declare a vulnerability as non-exploitable because the underlying vulnerable code path is not reachable within your specific application context. Using these together allows security teams to verify what is present (CVSS), prioritize what is actively dangerous (EPSS), and dismiss the noise (VEX)."}},{"faq_heading":"How does Managed Dependency-Track safeguard data sovereignty compared to commercial SaaS tools?","faq_copy":{"html":"Commercial SaaS security tools operate as a "black box," meaning your Software Bill of Materials (SBOM) and internal vulnerability data must be exported and stored within the vendor's multi-tenant public cloud footprint.
With amazee.io’s Managed Dependency-Track, your data security follows a strict "your data is your data" philosophy: Your SBOMs and vulnerability profiles remain isolated within your existing cloud boundaries (such as AWS or GCP).
It eliminates the risk of exposing sensitive infrastructure blueprints to a third-party shared database.
It keeps your platform fully compliant with stringent data-residency laws and frameworks such as DORA, SOC 2, and ISO 27001.
","raw":[{"type":"paragraph","text":"Commercial SaaS security tools operate as a \"black box,\" meaning your Software Bill of Materials (SBOM) and internal vulnerability data must be exported and stored within the vendor's multi-tenant public cloud footprint.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"With amazee.io’s Managed Dependency-Track, your data security follows a strict \"your data is your data\" philosophy: Your SBOMs and vulnerability profiles remain isolated within your existing cloud boundaries (such as AWS or GCP).","spans":[],"direction":"ltr"},{"type":"paragraph","text":"It eliminates the risk of exposing sensitive infrastructure blueprints to a third-party shared database.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"It keeps your platform fully compliant with stringent data-residency laws and frameworks such as DORA, SOC 2, and ISO 27001.","spans":[],"direction":"ltr"}],"text":"Commercial SaaS security tools operate as a \"black box,\" meaning your Software Bill of Materials (SBOM) and internal vulnerability data must be exported and stored within the vendor's multi-tenant public cloud footprint. With amazee.io’s Managed Dependency-Track, your data security follows a strict \"your data is your data\" philosophy: Your SBOMs and vulnerability profiles remain isolated within your existing cloud boundaries (such as AWS or GCP). It eliminates the risk of exposing sensitive infrastructure blueprints to a third-party shared database. It keeps your platform fully compliant with stringent data-residency laws and frameworks such as DORA, SOC 2, and ISO 27001."}},{"faq_heading":"Will continuous SBOM generation and ingestion slow down our CI/CD pipelines?","faq_copy":{"html":"No. When built into automated deployment workflows (like Lagoon), continuous SBOM generation uses highly efficient tools like Syft during the background "Insights gathering" step. In practice, this process only adds 20 to 60 seconds to an active deployment. This negligible timeline hit completely eliminates operational friction from manual uploads while ensuring your centralized fleet inventory remains fully current and auditable.
","raw":[{"type":"paragraph","text":"No. When built into automated deployment workflows (like Lagoon), continuous SBOM generation uses highly efficient tools like Syft during the background \"Insights gathering\" step. In practice, this process only adds 20 to 60 seconds to an active deployment. This negligible timeline hit completely eliminates operational friction from manual uploads while ensuring your centralized fleet inventory remains fully current and auditable.","spans":[{"start":0,"end":2,"type":"strong"}],"direction":"ltr"}],"text":"No. When built into automated deployment workflows (like Lagoon), continuous SBOM generation uses highly efficient tools like Syft during the background \"Insights gathering\" step. In practice, this process only adds 20 to 60 seconds to an active deployment. This negligible timeline hit completely eliminates operational friction from manual uploads while ensuring your centralized fleet inventory remains fully current and auditable."}}]},"body":[{"id":"4f2e8654-5317-59e4-af5e-5254f9fa29ba","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"\n\n ![\"A](\"https://images.prismic.io/amazeeio/agyGcqYofJOwHYho_amazee-io-managed-dependency-track-supply-chain-security-guide.png?auto=format,compress\")
\n
Put plainly by our Head of Product, Lauren Morris, in our recent webinar on Dependency-Track: “I eat Fritos all the time and purposely do not read the label. But sometimes you do want to know what you're putting in your body.”
Modern software works in a similar way. Every application is built on layers of dependencies, base images, and transitive components that evolve faster than most teams can track manually. A Software Bill of Materials (SBOM) provides a practical way to understand what is actually inside that stack. The comparison to nutrition labels fits neatly: you may not check every label every day, but when you need to know, that information becomes essential.
The core argument is simple: periodic scans are no longer enough. When a supply chain exploit emerges, organizations need visibility into their exposure in minutes, not days later. This guide explains how continuous SBOM monitoring works and why many teams choose a managed approach rather than operating the platform themselves.
","raw":[{"type":"heading2","text":"Introduction: The “Fritos” Problem of Modern Software","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Put plainly by our Head of Product, Lauren Morris, in our recent webinar on Dependency-Track: “I eat Fritos all the time and purposely do not read the label. But sometimes you do want to know what you're putting in your body.”","spans":[{"start":65,"end":92,"type":"hyperlink","data":{"link_type":"Web","url":"https://www.amazee.io/resources/webinar/uncover-hidden-vulnerabilities-with-dependency-track","target":"_blank"}},{"start":65,"end":92,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Modern software works in a similar way. Every application is built on layers of dependencies, base images, and transitive components that evolve faster than most teams can track manually. A Software Bill of Materials (SBOM) provides a practical way to understand what is actually inside that stack. The comparison to nutrition labels fits neatly: you may not check every label every day, but when you need to know, that information becomes essential.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"The core argument is simple: periodic scans are no longer enough. When a supply chain exploit emerges, organizations need visibility into their exposure in minutes, not days later. This guide explains how continuous SBOM monitoring works and why many teams choose a managed approach rather than operating the platform themselves.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Introduction: The “Fritos” Problem of Modern Software Put plainly by our Head of Product, Lauren Morris, in our recent webinar on Dependency-Track: “I eat Fritos all the time and purposely do not read the label. But sometimes you do want to know what you're putting in your body.” Modern software works in a similar way. Every application is built on layers of dependencies, base images, and transitive components that evolve faster than most teams can track manually. A Software Bill of Materials (SBOM) provides a practical way to understand what is actually inside that stack. The comparison to nutrition labels fits neatly: you may not check every label every day, but when you need to know, that information becomes essential. The core argument is simple: periodic scans are no longer enough. When a supply chain exploit emerges, organizations need visibility into their exposure in minutes, not days later. This guide explains how continuous SBOM monitoring works and why many teams choose a managed approach rather than operating the platform themselves. "}}},{"id":"9ac96af8-5de6-5c95-9206-41ac7cb8d914","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Dependency-Track is an open source, API-first Software Composition Analysis platform that ingests SBOMs, catalogs components, and continuously matches that inventory against vulnerability intelligence. The important framing is that it is a portfolio tool, not a 1:1 project tool.
That portfolio orientation matters because most organizations do not have one application. They have fleets. Dependency-Track is designed to answer questions across that fleet without turning every incident into a manual inventory exercise.
","raw":[{"type":"heading2","text":"What is Dependency-Track?","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"heading3","text":"Defining the Tool","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Dependency-Track is an open source, API-first Software Composition Analysis platform that ingests SBOMs, catalogs components, and continuously matches that inventory against vulnerability intelligence. The important framing is that it is a portfolio tool, not a 1:1 project tool.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"That portfolio orientation matters because most organizations do not have one application. They have fleets. Dependency-Track is designed to answer questions across that fleet without turning every incident into a manual inventory exercise.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"What is Dependency-Track? Defining the Tool Dependency-Track is an open source, API-first Software Composition Analysis platform that ingests SBOMs, catalogs components, and continuously matches that inventory against vulnerability intelligence. The important framing is that it is a portfolio tool, not a 1:1 project tool. That portfolio orientation matters because most organizations do not have one application. They have fleets. Dependency-Track is designed to answer questions across that fleet without turning every incident into a manual inventory exercise. "}}},{"id":"15be09f7-9183-5820-b1cb-73b9d73698ac","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Dependency-Track is an OWASP project, which positions it as an open source standard and part of a security community that values transparency and shared practices. This aligns naturally with amazee.io’s “open source at the core” ethos.
","raw":[{"type":"heading3","text":"OWASP Origins","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Dependency-Track is an OWASP project, which positions it as an open source standard and part of a security community that values transparency and shared practices. This aligns naturally with amazee.io’s “open source at the core” ethos.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"OWASP Origins Dependency-Track is an OWASP project, which positions it as an open source standard and part of a security community that values transparency and shared practices. This aligns naturally with amazee.io’s “open source at the core” ethos. "}}},{"id":"a93e90ee-ed99-5d12-abd9-90a62dbf5b6d","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"SBOMs are inventories of the contents of your software artifact. They can describe application dependencies, OS packages, and deeper layers of container images.
SBOMs become far more valuable when they’re generated automatically and ingested continuously, because security depends on both what you run and what the world discovers about what you run.
In practice, SBOMs help you answer:
The National Vulnerability Database (NVD) is the primary source of standardized vulnerability data, enriching CVEs with severity scores, affected products, and remediation guidance. But the NVD is not always fast. Processing and enrichment delays can leave security teams without critical context during the first hours of an incident, when exploit tooling spreads quickly and leadership wants immediate answers.
The goal is not to replace the NVD. It is to reduce the gap between knowing what software you have and understanding whether it is vulnerable.
","raw":[{"type":"heading2","text":"Solving the “NVD Gap”: Intelligence Beyond the Database","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"heading3","text":"The National Vulnerability Database (NVD) Crisis","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"The National Vulnerability Database (NVD) is the primary source of standardized vulnerability data, enriching CVEs with severity scores, affected products, and remediation guidance. But the NVD is not always fast. Processing and enrichment delays can leave security teams without critical context during the first hours of an incident, when exploit tooling spreads quickly and leadership wants immediate answers.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"The goal is not to replace the NVD. It is to reduce the gap between knowing what software you have and understanding whether it is vulnerable.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Solving the “NVD Gap”: Intelligence Beyond the Database The National Vulnerability Database (NVD) Crisis The National Vulnerability Database (NVD) is the primary source of standardized vulnerability data, enriching CVEs with severity scores, affected products, and remediation guidance. But the NVD is not always fast. Processing and enrichment delays can leave security teams without critical context during the first hours of an incident, when exploit tooling spreads quickly and leadership wants immediate answers. The goal is not to replace the NVD. It is to reduce the gap between knowing what software you have and understanding whether it is vulnerable. "}}},{"id":"7b202666-853a-5535-bffb-076e5368be3d","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"To close that gap, organizations aggregate intelligence from multiple sources, including GitHub Advisory Database, OSV, and Snyk.
The value is speed and context. Alternative feeds often publish affected ranges, remediation guidance, and exploit discussions before the NVD completes enrichment. Combining those sources gives teams faster answers and better data during active incidents.
","raw":[{"type":"heading3","text":"Multi-Source Intelligence Aggregation","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"To close that gap, organizations aggregate intelligence from multiple sources, including GitHub Advisory Database, OSV, and Snyk.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"The value is speed and context. Alternative feeds often publish affected ranges, remediation guidance, and exploit discussions before the NVD completes enrichment. Combining those sources gives teams faster answers and better data during active incidents.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Multi-Source Intelligence Aggregation To close that gap, organizations aggregate intelligence from multiple sources, including GitHub Advisory Database, OSV, and Snyk. The value is speed and context. Alternative feeds often publish affected ranges, remediation guidance, and exploit discussions before the NVD completes enrichment. Combining those sources gives teams faster answers and better data during active incidents. "}}},{"id":"903e934c-6a55-5a20-a644-939f72029da9","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Aggregation matters most during fast-moving zero-day events. In our aforementioned webinar, amazee.io’s Principal Architect, Sean Hamlin, highlighted the recent Next.js RCE issue, in which bots began scanning the internet within hours of the disclosure.
The 2024 XZ Utils backdoor incident showed a different risk: a trusted low-level dependency becoming the target itself. In both cases, version-level visibility is essential for understanding real exposure.
But visibility only matters if inventory stays current, which is where automated ingestion becomes critical.
","raw":[{"type":"heading3","text":"Why Aggregation Matters for Zero-Day Threats","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Aggregation matters most during fast-moving zero-day events. In our aforementioned webinar, amazee.io’s Principal Architect, Sean Hamlin, highlighted the recent Next.js RCE issue, in which bots began scanning the internet within hours of the disclosure.","spans":[{"start":83,"end":90,"type":"hyperlink","data":{"link_type":"Web","url":"https://www.amazee.io/resources/webinar/uncover-hidden-vulnerabilities-with-dependency-track","target":"_blank"}},{"start":83,"end":90,"type":"strong"},{"start":161,"end":179,"type":"hyperlink","data":{"link_type":"Web","url":"https://nextjs.org/blog/CVE-2025-66478","target":"_blank"}},{"start":161,"end":178,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"The 2024 XZ Utils backdoor incident showed a different risk: a trusted low-level dependency becoming the target itself. In both cases, version-level visibility is essential for understanding real exposure.","spans":[{"start":9,"end":35,"type":"hyperlink","data":{"link_type":"Web","url":"https://en.wikipedia.org/wiki/XZ_Utils_backdoor","target":"_blank"}},{"start":9,"end":35,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"But visibility only matters if inventory stays current, which is where automated ingestion becomes critical.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Why Aggregation Matters for Zero-Day Threats Aggregation matters most during fast-moving zero-day events. In our aforementioned webinar, amazee.io’s Principal Architect, Sean Hamlin, highlighted the recent Next.js RCE issue, in which bots began scanning the internet within hours of the disclosure. The 2024 XZ Utils backdoor incident showed a different risk: a trusted low-level dependency becoming the target itself. In both cases, version-level visibility is essential for understanding real exposure. But visibility only matters if inventory stays current, which is where automated ingestion becomes critical. "}}},{"id":"299828f9-1a6c-5c3d-9e88-60eef8e43781","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Dependency-Track is only as useful as the SBOM pipeline feeding it. Manual uploads don’t scale and often fail under stress. The goal is to generate SBOMs automatically and continuously ingest them, keeping the inventory current without heroics.
","raw":[{"type":"heading2","text":"Continuous Ingestion: Where Dependency-Track becomes Operational","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Dependency-Track is only as useful as the SBOM pipeline feeding it. Manual uploads don’t scale and often fail under stress. The goal is to generate SBOMs automatically and continuously ingest them, keeping the inventory current without heroics.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Continuous Ingestion: Where Dependency-Track becomes Operational Dependency-Track is only as useful as the SBOM pipeline feeding it. Manual uploads don’t scale and often fail under stress. The goal is to generate SBOMs automatically and continuously ingest them, keeping the inventory current without heroics. "}}},{"id":"e55f7de7-07a3-595e-b3d8-26a90d96a23e","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"At a high level, the pipeline needs two things: SBOMs generated automatically, and continuous ingestion into a central inventory. With Lagoon, this can be integrated into the deployment flow so teams don’t rely on manual uploads.
SBOM quality also matters. In the webinar, Sean referenced moving from Trivy to Syft because Syft can produce more complete labels. In the Lagoon context, SBOM generation typically adds 20-60 seconds to a deployment during the “Insights gathering” step, a manageable cost for continuous visibility.
Finally, closed-loop notifications using tools like Slack and Teams help you avoid living in the UI. The best practice is simple. The system should only notify you when a new CVE matches your existing inventory.
","raw":[{"type":"heading3","text":"CI/CD Integration Patterns (High-Level)","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"At a high level, the pipeline needs two things: SBOMs generated automatically, and continuous ingestion into a central inventory. With Lagoon, this can be integrated into the deployment flow so teams don’t rely on manual uploads.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"SBOM quality also matters. In the webinar, Sean referenced moving from Trivy to Syft because Syft can produce more complete labels. In the Lagoon context, SBOM generation typically adds 20-60 seconds to a deployment during the “Insights gathering” step, a manageable cost for continuous visibility.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Finally, closed-loop notifications using tools like Slack and Teams help you avoid living in the UI. The best practice is simple. The system should only notify you when a new CVE matches your existing inventory.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"CI/CD Integration Patterns (High-Level) At a high level, the pipeline needs two things: SBOMs generated automatically, and continuous ingestion into a central inventory. With Lagoon, this can be integrated into the deployment flow so teams don’t rely on manual uploads. SBOM quality also matters. In the webinar, Sean referenced moving from Trivy to Syft because Syft can produce more complete labels. In the Lagoon context, SBOM generation typically adds 20-60 seconds to a deployment during the “Insights gathering” step, a manageable cost for continuous visibility. Finally, closed-loop notifications using tools like Slack and Teams help you avoid living in the UI. The best practice is simple. The system should only notify you when a new CVE matches your existing inventory. "}}},{"id":"041de476-8dc5-5c98-b99e-7535e03466ca","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Alert fatigue kills programs. Dependency-Track’s risk score is useful, but it should guide research and not trigger panic by itself. The goal of triage is to quickly separate “interesting” from “urgent,” and to document decisions so teams don’t re-litigate the same findings every time a scanner refreshes.
Two concepts help teams focus on what matters:
VEX lets you document non-exploitability when a vulnerable library exists, but the vulnerable code path is not reachable in your context. It’s how you turn “this shows up in the SBOM” into a defensible decision: present, but not exploitable here.
EPSS helps prioritize vulnerabilities that are more likely to be exploited in the wild, which is often more operationally useful than severity alone, especially when teams are staring at a long backlog.
Dependency-Track becomes essential as soon as you have enough services that spreadsheets become useless. In the webinar, Sean describes the calm workflow: search for a CVE, see affected projects immediately, and hand developers a targeted list instead of asking them to inventory everything during a crisis.
High-value fleet questions that Dependency-Track can answer:
In practice, teams usually consider one of three options:
DIY (open source): gives maximum transparency, but you operate the platform long-term.
Commercial SaaS: reduces operations but can introduce “black box” tradeoffs and data-residency constraints.
Managed Dependency-Track (amazee.io): keeps open source transparency while removing the day-two operational burden, with strong control over where data lives.
","raw":[{"type":"heading2","text":"Why Managed Dependency-Track?","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"heading3","text":"SCA Landscape: DIY vs. Commercial vs. Managed","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"In practice, teams usually consider one of three options:","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"DIY (open source): gives maximum transparency, but you operate the platform long-term.","spans":[{"start":0,"end":19,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Commercial SaaS: reduces operations but can introduce “black box” tradeoffs and data-residency constraints.","spans":[{"start":0,"end":17,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Managed Dependency-Track (amazee.io): keeps open source transparency while removing the day-two operational burden, with strong control over where data lives.","spans":[{"start":0,"end":36,"type":"strong"}],"direction":"ltr"},{"type":"heading3","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Why Managed Dependency-Track? SCA Landscape: DIY vs. Commercial vs. Managed In practice, teams usually consider one of three options: DIY (open source): gives maximum transparency, but you operate the platform long-term. Commercial SaaS: reduces operations but can introduce “black box” tradeoffs and data-residency constraints. Managed Dependency-Track (amazee.io): keeps open source transparency while removing the day-two operational burden, with strong control over where data lives. "}}},{"id":"fe767f55-1e46-54f7-8157-e48c18ad51af","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"<table class="tg"> <thead> <tr> <th class="tg-0pky"><span style="font-weight:bold">Feature</span></th> <th class="tg-0pky"><span style="font-weight:bold">DIY (Standard Open Source)</span></th> <th class="tg-0pky"><span style="font-weight:bold">Commercial SaaS (Snyk, Black Duck, etc.)</span></th> <th class="tg-0pky"><span style="font-weight:bold">Managed Dependency-Track (amazee.io)</span></th> </tr> </thead> <tbody> <tr> <td class="tg-0pky"><span style="font-weight:bold">Direct Cost</span></td> <td class="tg-0pky">$0 (Licensing)</td> <td class="tg-0pky">High (Per-seat/Per-repo)</td> <td class="tg-0pky">Predictable (Tiered Pricing)</td> </tr> <tr> <td class="tg-0pky"><span style="font-weight:bold">Infrastructure</span></td> <td class="tg-0pky">You manage Java/PostgreSQL</td> <td class="tg-0pky">Proprietary "Black Box"</td> <td class="tg-0pky">Open Source (on optimized PaaS)</td> </tr> <tr> <td class="tg-0pky"><span style="font-weight:bold">Data Sovereignty</span></td> <td class="tg-0pky">Your Cloud</td> <td class="tg-0pky">Their Cloud</td> <td class="tg-0pky">Your Cloud (In isolation)</td> </tr> <tr> <td class="tg-0pky"><span style="font-weight:bold">Transparency</span></td> <td class="tg-0pky">Full (Source available)</td> <td class="tg-0pky">None (Proprietary)</td> <td class="tg-0pky">Full (Open source code/logic)</td> </tr> <tr> <td class="tg-0pky"><span style="font-weight:bold">Threat Feeds</span></td> <td class="tg-0pky">Manual Configuration</td> <td class="tg-0pky">Proprietary & Bundled</td> <td class="tg-0pky">Pre-configured (Multi-source)</td> </tr> <tr> <td class="tg-0pky"><span style="font-weight:bold">Compliance</span></td> <td class="tg-0pky">Your responsibility</td> <td class="tg-0pky">SOC 2 / ISO (on their end)</td> <td class="tg-0pky">SOC 2 / ISO / DORA Ready</td> </tr> </tbody> </table>
","raw":[{"type":"paragraph","text":"| Feature | DIY (Standard Open Source) | Commercial SaaS (Snyk, Black Duck, etc.) | Managed Dependency-Track (amazee.io) |
|---|---|---|---|
| Direct Cost | $0 (Licensing) | High (Per-seat/Per-repo) | Predictable (Tiered Pricing) |
| Infrastructure | You manage Java/PostgreSQL | Proprietary \"Black Box\" | Open Source (on optimized PaaS) |
| Data Sovereignty | Your Cloud | Their Cloud | Your Cloud (In isolation) |
| Transparency | Full (Source available) | None (Proprietary) | Full (Open source code/logic) |
| Threat Feeds | Manual Configuration | Proprietary & Bundled | Pre-configured (Multi-source) |
| Compliance | Your responsibility | SOC 2 / ISO (on their end) | SOC 2 / ISO / DORA Ready |
| Feature | DIY (Standard Open Source) | Commercial SaaS (Snyk, Black Duck, etc.) | Managed Dependency-Track (amazee.io) |
|---|---|---|---|
| Direct Cost | $0 (Licensing) | High (Per-seat/Per-repo) | Predictable (Tiered Pricing) |
| Infrastructure | You manage Java/PostgreSQL | Proprietary \"Black Box\" | Open Source (on optimized PaaS) |
| Data Sovereignty | Your Cloud | Their Cloud | Your Cloud (In isolation) |
| Transparency | Full (Source available) | None (Proprietary) | Full (Open source code/logic) |
| Threat Feeds | Manual Configuration | Proprietary & Bundled | Pre-configured (Multi-source) |
| Compliance | Your responsibility | SOC 2 / ISO (on their end) | SOC 2 / ISO / DORA Ready |
Here’s the key point: the hidden cost of DIY isn’t the first deployment. It’s the day-two work, such as upgrades, database tuning, feed health, monitoring, backups, and keeping the platform itself secure. If your goal is to reduce supply chain risk, the more time you spend operating the tool, the less time you spend reducing actual risk.
","raw":[{"type":"heading3","text":"The Infrastructure Overhead","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Here’s the key point: the hidden cost of DIY isn’t the first deployment. It’s the day-two work, such as upgrades, database tuning, feed health, monitoring, backups, and keeping the platform itself secure. If your goal is to reduce supply chain risk, the more time you spend operating the tool, the less time you spend reducing actual risk.","spans":[{"start":205,"end":339,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"The Infrastructure Overhead Here’s the key point: the hidden cost of DIY isn’t the first deployment. It’s the day-two work, such as upgrades, database tuning, feed health, monitoring, backups, and keeping the platform itself secure. If your goal is to reduce supply chain risk, the more time you spend operating the tool, the less time you spend reducing actual risk. "}}},{"id":"45677d47-5ca7-52f6-8fda-254a2015dbac","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"SBOMs and vulnerability posture can be sensitive. During Q&A, Lauren succinctly summarized the expectation: “Your data is your data.” For many teams, the requirement is that vulnerability and SBOM data stay within existing security boundaries in AWS, GCP, or another controlled environment, rather than living in a shared public cloud SaaS footprint.
Data sovereignty is also intertwined with compliance. If you need to prove control over where data lives and how it is accessed, the hosting model becomes part of your security story.
","raw":[{"type":"heading3","text":"Data Sovereignty and Compliance","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"SBOMs and vulnerability posture can be sensitive. During Q&A, Lauren succinctly summarized the expectation: “Your data is your data.” For many teams, the requirement is that vulnerability and SBOM data stay within existing security boundaries in AWS, GCP, or another controlled environment, rather than living in a shared public cloud SaaS footprint.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Data sovereignty is also intertwined with compliance. If you need to prove control over where data lives and how it is accessed, the hosting model becomes part of your security story.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Data Sovereignty and Compliance SBOMs and vulnerability posture can be sensitive. During Q&A, Lauren succinctly summarized the expectation: “Your data is your data.” For many teams, the requirement is that vulnerability and SBOM data stay within existing security boundaries in AWS, GCP, or another controlled environment, rather than living in a shared public cloud SaaS footprint. Data sovereignty is also intertwined with compliance. If you need to prove control over where data lives and how it is accessed, the hosting model becomes part of your security story. "}}},{"id":"2545da9e-6698-5aa5-a28f-527687cf3041","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Managed Dependency-Track focuses on removing the day-one configuration headache and the day-two operations burden. It also supports the deployment flexibility described by Sean, where instances can be provisioned in the location and cloud environment required by the customer.
The “inception” joke from the webinar illustrates how deep the integration can go. Sean described deploying Dependency-Track with Lagoon and using Dependency-Track to create SBOMs for Dependency-Track itself. It is funny, but it also demonstrates a platform mindset where continuous security is baked into how systems are delivered.
Managed hosting also ties into platform security. The goal is to meet SOC 2, ISO 27001, and DORA-oriented expectations through a managed approach that pre-configures feeds, reduces manual twiddling, and standardizes operations in a way that stands up to audits.
","raw":[{"type":"heading3","text":"amazee.io’s Managed Solution","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Managed Dependency-Track focuses on removing the day-one configuration headache and the day-two operations burden. It also supports the deployment flexibility described by Sean, where instances can be provisioned in the location and cloud environment required by the customer.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"The “inception” joke from the webinar illustrates how deep the integration can go. Sean described deploying Dependency-Track with Lagoon and using Dependency-Track to create SBOMs for Dependency-Track itself. It is funny, but it also demonstrates a platform mindset where continuous security is baked into how systems are delivered.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Managed hosting also ties into platform security. The goal is to meet SOC 2, ISO 27001, and DORA-oriented expectations through a managed approach that pre-configures feeds, reduces manual twiddling, and standardizes operations in a way that stands up to audits.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"amazee.io’s Managed Solution Managed Dependency-Track focuses on removing the day-one configuration headache and the day-two operations burden. It also supports the deployment flexibility described by Sean, where instances can be provisioned in the location and cloud environment required by the customer. The “inception” joke from the webinar illustrates how deep the integration can go. Sean described deploying Dependency-Track with Lagoon and using Dependency-Track to create SBOMs for Dependency-Track itself. It is funny, but it also demonstrates a platform mindset where continuous security is baked into how systems are delivered. Managed hosting also ties into platform security. The goal is to meet SOC 2, ISO 27001, and DORA-oriented expectations through a managed approach that pre-configures feeds, reduces manual twiddling, and standardizes operations in a way that stands up to audits. "}}},{"id":"069b92f3-87f4-5ce3-80b9-37f4662e1cbb","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Teams tend to fall into the DIY trap because the software is free, only to realize the operational burden is high. Dependency-Track needs care, and vulnerability intelligence needs to stay healthy. Managed Dependency-Track keeps the transparency and cost-efficiency of open source while removing the operational overhead, so the organization can focus on remediation.
","raw":[{"type":"heading2","text":"Why Teams Choose Managed Dependency-Track","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Teams tend to fall into the DIY trap because the software is free, only to realize the operational burden is high. Dependency-Track needs care, and vulnerability intelligence needs to stay healthy. Managed Dependency-Track keeps the transparency and cost-efficiency of open source while removing the operational overhead, so the organization can focus on remediation.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Why Teams Choose Managed Dependency-Track Teams tend to fall into the DIY trap because the software is free, only to realize the operational burden is high. Dependency-Track needs care, and vulnerability intelligence needs to stay healthy. Managed Dependency-Track keeps the transparency and cost-efficiency of open source while removing the operational overhead, so the organization can focus on remediation. "}}},{"id":"24f006bf-a8c0-541a-bd98-c6fd150c3654","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"In a BYOC model, security and uptime are not owned by one party. They are shared across a stack, with each layer managed by the party best equipped to handle it. Getting clarity here early helps procurement because it turns the question of who is accountable into an actionable map of duties and escalation paths.
","raw":[{"type":"heading2","text":"Navigating the Shared Responsibility Framework","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"In a BYOC model, security and uptime are not owned by one party. They are shared across a stack, with each layer managed by the party best equipped to handle it. Getting clarity here early helps procurement because it turns the question of who is accountable into an actionable map of duties and escalation paths.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Navigating the Shared Responsibility Framework In a BYOC model, security and uptime are not owned by one party. They are shared across a stack, with each layer managed by the party best equipped to handle it. Getting clarity here early helps procurement because it turns the question of who is accountable into an actionable map of duties and escalation paths. "}}},{"id":"ddfbf9b1-2a6b-5c7c-814f-687b35d28b5b","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"Stop fighting fires when the next CVE drops. With Managed Dependency-Track from amazee.io, you get a dedicated instance (within your cloud boundaries) that continuously matches your SBOM inventory to vulnerability intelligence and alerts you only when action is required.
Reach out to your amazee.io Client Engagement Manager or contact the amazee.io sales team to get started.
","raw":[{"type":"heading2","text":"Conclusion: From Fire Drills to Continuous Security","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Stop fighting fires when the next CVE drops. With Managed Dependency-Track from amazee.io, you get a dedicated instance (within your cloud boundaries) that continuously matches your SBOM inventory to vulnerability intelligence and alerts you only when action is required.","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"Reach out to your amazee.io Client Engagement Manager or contact the amazee.io sales team to get started.","spans":[],"direction":"ltr"}],"text":"Conclusion: From Fire Drills to Continuous Security Stop fighting fires when the next CVE drops. With Managed Dependency-Track from amazee.io, you get a dedicated instance (within your cloud boundaries) that continuously matches your SBOM inventory to vulnerability intelligence and alerts you only when action is required. Reach out to your amazee.io Client Engagement Manager or contact the amazee.io sales team to get started."}}},{"id":"49395c96-86cd-50cf-8975-6d58d1d2c688","internal":{"type":"PrismicBlogPostBody1BasicContent"},"slice_label":null,"slice_type":"basic_content","primary":{"content":{"html":"👓 [Article] DDoS Attack Mitigation for Enterprises
👓 [Product Page] Managed Dependency-Track
👓 [Article] Fault-Tolerant Enterprise Hosting
","raw":[{"type":"heading2","text":"Further Reading","spans":[],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"👓 [Article] DDoS Attack Mitigation for Enterprises","spans":[{"start":13,"end":51,"type":"hyperlink","data":{"link_type":"Web","url":"https://www.amazee.io/blog/post/ddos-attack-mitigation-for-enterprises","target":"_blank"}},{"start":13,"end":51,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"👓 [Product Page] Managed Dependency-Track","spans":[{"start":18,"end":42,"type":"hyperlink","data":{"link_type":"Web","url":"https://www.amazee.io/product/dependency-track","target":"_blank"}},{"start":18,"end":42,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"},{"type":"paragraph","text":"👓 [Article] Fault-Tolerant Enterprise Hosting","spans":[{"start":13,"end":46,"type":"hyperlink","data":{"link_type":"Web","url":"https://www.amazee.io/blog/post/fault-tolerant-enterprise-hosting","target":"_blank"}},{"start":13,"end":46,"type":"strong"}],"direction":"ltr"},{"type":"paragraph","text":"","spans":[],"direction":"ltr"}],"text":"Further Reading 👓 [Article] DDoS Attack Mitigation for Enterprises 👓 [Product Page] Managed Dependency-Track 👓 [Article] Fault-Tolerant Enterprise Hosting "}}}],"summary":"Learn how our Managed Dependency-Track delivers continuous software supply chain security, automated SBOM monitoring, and multi-source CVE intelligence.","canonical_url":null,"unlisted":false,"calendar_title":null,"calendar_embed":{"url":""},"calender_heading":null,"calender_subheading":null,"calender_body":{"html":"","raw":[],"text":""},"calender_image":{"url":null,"alt":null},"images":[{"path":"https://images.prismic.io/amazeeio/agyGcqYofJOwHYho_amazee-io-managed-dependency-track-supply-chain-security-guide.png?auto=format%2Ccompress"}]}}]}}, "staticQueryHashes": ["1659250047","2244888832","3350517190"]}