Latest

Zero Trust Endpoint

Zero Trust Endpoint (ZTEP), also known as Zero Trust Endpoint Security, is a cybersecurity approach that assumes no device or user, whether inside or outside the corporate network, can be trusted by default. In a Zero Trust model, trust is never assumed. Strict access controls and security measures are applied

Zero Trust Network Access

Zero Trust Network, often referred to as Zero Trust Security, is a cybersecurity framework and approach to network security that challenges the traditional security model of "trust but verify." In a Zero Trust model, no one, whether inside or outside the organization's network perimeter, is automatically trusted by default. Instead,

A Rails App in Kubernetes with Hoop

Learn How to Audit, Monitor, and Protect your Application In this tutorial we will show how to Audit, Monitor, and Protect your Rails Application, in this case we're using Kubernetes to deploy the application. You only need to install the hoop agent to have a secure access and apply data

Secure Access in Rails Console Applications

Ruby on Rails, generally referred as Rails, is a popular open-source web application framework written in the Ruby programming language. It’s the free, open-source framework that runs powerhouses like Shopify, Coinbase, GitHub, Airbnb, Kickstarter, Square, Twitch, Basecamp and HEY. Rails has taken companies to millions of users and billions

Revolutionizing Privileged Access Management in the Cloud Era

Privileged Access Management (PAM) tools have been around for decades, designed in an era where network environments were vastly different from what we see today. These tools, originally created to protect trusted networks and endpoints, are struggling to adapt to the modern, cloud-centric landscape. Even though vendors claim to offer

The Positive Impacts of Large Language Models on Security

Many discussions about the security implications of Large Language Models (LLMs) tend to focus on the potential negatives—such as enhanced phishing and spam attacks. Let's shed light on the positive aspects LLMs bring to the table, especially in enhancing security practices. Understanding Language and Context LLMs offer a deep,

The Problem with Data Loss Prevention Methods

There are two main ways to accomplish data loss prevention. These methods aim to reduce the risk of data breaches by limiting exposure to sensitive data like emails, credit card numbers, and patient data. Rule-Based Policies: A Never-Ending Battle The first method involves creating numerous rules and policies to prevent

Hoop.dev Architecture

The architecture solves a few key problems with the existing technologies to address the privileged network access problem. Existing Solutions and Their Problems Let's start by discussing existing solutions and their associated problems. The most basic architecture to this problem is using a jump host. A jump host is a

The Evolution of Privilege Access Management

Traditional Privilege Access Management (PAM) solutions are rooted in an outdated technological landscape. They were designed for a handful of on-premise servers and databases, not today's cloud-first, data-intensive environment. Key Components and Design Flaws 1. Safety and Security: Traditional PAMs still use passwords, which are considered insecure. 2. Endpoint Trust:

Unlocking Secure and Efficient MySQL Access: A Guide to Overcoming Jump Host Vulnerabilities

When it comes to accessing MySQL databases in production, speed is of the essence. Engineers need quick access to troubleshoot, fix bugs, and resolve incidents. However, many teams use suboptimal solutions like Jump Hosts, inadvertently creating security risks and inefficient workflows. In this article, we will address the hidden vulnerabilities

Enhancing SQL Server Access Management on Google Cloud: Mitigating Hidden Vulnerabilities

If you're managing access to SQL Server in production using Google Cloud (gcloud), you might be facing a series of challenges that could compromise both security and efficiency. In this article, we will explore the five major problems associated with this approach, their potential impacts, and discuss practical steps to

Strengthening Elixir IEx AWS CLI Access: Four Key Steps to Boost Security and Efficiency

In today's fast-paced tech environment, ensuring efficient and secure access to Elixir IEx in production is a top priority. Engineers rely on this access for troubleshooting, bug fixes, and incident resolutions, making it essential to streamline the process. However, many teams grapple with inefficient access management solutions that can lead

Strengthening SQL Server Access Security: 4 Key Steps for Enhanced Protection

Introduction Managing access to SQL Server in production environments through a Jump Host can be a complex and challenging task. This approach is often chosen for its security benefits, but it can also introduce various problems. In this article, we will discuss the five major issues associated with Jump Host

Securing and Streamlining Amazon ECS Access: A Four-Step Guide to Overcoming Hidden Vulnerabilities

If you're managing access to Amazon Elastic Container Service (ECS) using the AWS Command Line Interface (CLI) in a production environment, you're likely facing a myriad of challenges. In this article, we'll delve into the five most significant problems associated with this approach, their impacts on your operations, and practical

Unlocking Secure and Efficient ECS Access Management: Four Steps to Success

Access management in the world of cloud computing is a multifaceted challenge. The complexity of orchestrating secure, efficient access to resources like Amazon Elastic Container Service (ECS) can lead to vulnerabilities that often remain hidden. In this article, we'll delve into the five major problems associated with ECS VPN access

Hoop Just Works (part 1/3)

This blogpost is part 1/3 and I'll be showing how Hoop integrates seamless with major cloud platforms like Heroku, AWS and Kubernetes. Beginning from version 1.14.11+ we have shipped a new way of getting started with the agent setup on Heroku. Using our custom buildpack and editing

Securing MySQL on Google Cloud: A 4-Step Guide to Eliminate Hidden Vulnerabilities

Managing MySQL access in a cloud-native environment is fraught with complexities and potential vulnerabilities. If you're using Google Cloud (gCloud) to control access to your MySQL databases, you could be exposing your systems to significant risks. This article outlines four practical steps to secure your MySQL access on gCloud, addressing

Why care about Hoop.dev if you already use SSO

Identity providers became quite standard these days. Why would a company care about another solution for Single Sign-On (SSO) if they are already using an identity provider? The answer is multifold. Compatibility Firstly, it's important to note that not everything is SSO compatible. Consequently, there are often weak links in

Optimizing Kubernetes gcloud Access: Four Steps to Strengthen Security and Efficiency

If you are responsible for managing access to Kubernetes in your production environment using Google Cloud (gcloud), you likely encounter several challenges. In this article, we will delve into the five most significant problems associated with this approach, explore their implications, and provide practical strategies to mitigate their impact. The

Enhancing ECS SSH Access: 4 Steps to Address Hidden Vulnerabilities

When it comes to controlling access to Amazon Elastic Container Service (ECS) in a production environment, ensuring efficiency and security is paramount. However, many organizations face challenges in this area that often go unnoticed. In this article, we'll delve into the five major issues associated with ECS SSH access, explore

Strengthening Kubernetes kubectl Access: Four Essential Steps

If you are responsible for managing access to Kubernetes in a production environment using kubectl, you are likely aware of the various challenges that come with it. In this article, we will delve into the five most significant problems associated with this approach, explore their implications, and discuss practical ways

PAM with advanced workflows and automations using AI

Explore how Hoop.dev, a leading privileged access management solution, effortlessly integrates into your engineering workflows, providing unprecedented data protection and advanced automations using AI. In this video, we dive into features like the SSO connector, which fortifies tools without SSO support, adding strong authentication to everything from databases to

Optimizing Kubernetes Access Management: Four Steps to Strengthen Security and Efficiency

In the world of Kubernetes and production environments, ensuring quick and secure access to the right engineers is essential. The ability to troubleshoot, fix bugs, and resolve incidents hinges on seamless data access. However, many organizations grapple with inefficient access management solutions, leading to significant security risks and workflow bottlenecks.

Comparison between Hoop and Rancher—a tool designed to manage Kubernetes access

Similarities exist between them, yet important differences also abound. As a starting point, it is worth noting that all functionalities provided by Rancher are also available in Hoop. However, the scope of features offered by Hoop far outpaces that of Rancher; in essence, Rancher offers only a subset of the

Streamlining Kubernetes Access: A Four-Step Guide to Enhance Security and Efficiency

Kubernetes has revolutionized container orchestration, enabling the deployment and management of containerized applications at scale. However, like any powerful tool, it comes with its own set of challenges, especially when it comes to granting secure access to your Kubernetes clusters. Many organizations turn to VPN (Virtual Private Network) solutions to

New Web App UI Homepage and much more

We just published version 1.14.0 of hoop.dev with exciting news! A new homepage, with all your resources in your hand, a connection page, with all information and actions possible on that connection and massive user experience improvements. Use two seatbelts, you gonna need them! The new Homepage

Mastering Kubernetes SSH Access: 4 Strategic Steps to Security and Efficiency

Kubernetes, a powerful container orchestration system, has become the go-to solution for managing containerized applications at scale. However, when it comes to granting SSH access to Kubernetes in production environments, many organizations struggle with a variety of challenges. In this article, we'll explore the five primary issues associated with Kubernetes

Enhancing SQL Server AWS CLI Access: A Comprehensive Guide to Security and Efficiency

Introduction In the fast-paced world of production environments, rapid access to SQL Server is crucial for maintaining product speed. Whether it's troubleshooting, bug fixes, or incident resolutions, the efficiency of these processes hinges on seamless data access. Unfortunately, many teams grapple with suboptimal solutions for granting access, inadvertently creating significant

Securing SQL Server kubectl Access: Four Crucial Steps

If you manage access to SQL Server in a production environment using kubectl, you're likely facing a range of challenges. In this article, we'll delve into the five most significant issues associated with this practice, discuss their potential impacts, and explore actionable steps to mitigate these problems. Fast and secure

A new way to review your sessions

We're improving hoop.dev constantly based on your feedback and now we bring a new and exciting update on our sessions flow experience. We've added the information about the review of a session integrated within it so you can see what approves are needed (and if it was rejected 👀). Be

Strengthening SQL Server SSH Access: Four Essential Measures

When it comes to controlling access to SQL Server in production using SSH, there are several common challenges that many organizations face. In this article, we will explore the five major issues associated with this practice, their potential consequences, and practical solutions to mitigate these problems. Fast and secure access

Securing Rails Console gcloud Access: Four Essential Steps

When it comes to controlling access to Rails Console in production using gcloud, there are several common challenges that many organizations face. In this article, we will delve into the five major issues associated with this practice, their potential consequences, and practical solutions to mitigate these problems. Ensuring fast and

Enhancing Rails Console AWS CLI Access: 4 Steps to Uncover Hidden Vulnerabilities and Streamline Security

Access to Rails Console in a production environment is vital for ensuring the smooth operation of web applications and resolving issues promptly. Many teams rely on AWS CLI for managing this access, but it comes with its own set of challenges and vulnerabilities. In this article, we'll delve into the

Enhancing Elixir IEx gcloud Access: Four Key Strategies to Bolster Security and Streamline Workflow

If you're managing access to Elixir IEx in production through gcloud, you may be facing several challenges. In this article, we'll delve into the five primary issues, their consequences, and practical steps to mitigate their impact. The Challenges of Elixir IEx gcloud Access Fast access to skilled engineers in a

Enhancing Rails Console kubectl Access: A Four-Step Guide to Mitigating Hidden Vulnerabilities

If you're managing access to the Rails Console in production using kubectl, you might be facing several challenges. In this article, we'll delve into the five major problems associated with this approach, explore their impacts on your operations, and discuss practical steps to mitigate these issues. The Need for Fast

Enhancing Security and Efficiency: Four Steps to Address Elixir IEx kubectl Access Challenges

If you're responsible for managing access to Elixir IEx in a production environment using kubectl, you may encounter several challenges that can impact security and workflow efficiency. In this article, we'll delve into the five major problems associated with this setup, explore their consequences, and present practical solutions to mitigate

Fixing Hidden Vulnerabilities in Elixir IEx Jump Host Access: A 4-Step Guide

If you're responsible for managing access to Elixir IEx in a production environment through a Jump Host, you likely encounter various challenges. In this article, we'll delve into the five most significant problems, their consequences, and provide practical solutions to mitigate their impact. The Importance of Fast Access to Engineers

Securing SQL Server VPN Access: Strategies for Efficiency, Compliance, and Peace of Mind

In the realm of managing SQL Server access via VPN, there are often unspoken challenges that need addressing. This article explores the five most prominent problems associated with SQL Server VPN access, the ramifications they carry, and practical strategies to mitigate their impact. Let's dive into these issues and discover

Unlocking the Power of ECS: Securing Access and Optimizing Workflows

ntroduction When it comes to managing access to Amazon Elastic Container Service (ECS) in a production environment, organizations face numerous challenges. In this article, we will delve into the five major issues that arise when using Jump Host for ECS access, explore their implications, and provide practical solutions to mitigate

Optimizing Rails Console Access: A Four-Step Strategy to Enhance Security and Efficiency

In today's fast-paced tech world, having quick and efficient access to the Rails Console in a production environment is crucial for maintaining product speed and ensuring rapid troubleshooting, bug fixes, and incident resolutions. However, many organizations grapple with the challenge of providing secure and efficient access. This article delves into

Strengthening Elixir IEx VPN Access: Four Key Strategies to Enhance Efficiency and Security

Introduction In today's fast-paced software development landscape, having efficient and secure access to Elixir IEx in production environments is crucial. However, many organizations grapple with the complexities of managing such access, often resorting to suboptimal solutions that pose security risks and hinder productivity. In this article, we will explore the

Strengthening Security and Efficiency in Rails Console VPN Access: A Step-by-Step Guide

In the ever-evolving landscape of web development and data management, securing access to sensitive systems is paramount. Rails Console VPN access is a common practice, but it often hides vulnerabilities that need addressing. In this article, we'll discuss the five major challenges associated with Rails Console VPN access, their implications,

More power in visualizing and working with sessions

We're improving the experience in our sessions so your workflow can be better. We just released version 1.12.17 with exciting news. It's possible to re-run a session from your history by simply going to the three dots options menu on the top right corner of the modal and

Securing Elixir IEx Access: A Strategic Approach to Overcoming Hidden Vulnerabilities

In the world of Elixir, fast and efficient access to the Interactive Elixir Shell (IEx) is crucial for maintaining product speed and ensuring rapid troubleshooting, bug fixes, and incident resolutions. However, managing this access securely can be a complex and often overlooked challenge. In this article, we'll delve into the

Unlocking the Full Potential of Postgres on GCloud: Strategies to Address Hidden Vulnerabilities

Introduction Controlling access to Postgres in production using GCloud can be a complex task. While it offers many advantages, it also poses significant challenges. In this article, we will explore the five major issues that organizations face when managing Postgres access through GCloud. We will delve into their impacts and

4 Steps to Strengthen ECS GCloud Access: Addressing Hidden Vulnerabilities

Introduction Ensuring efficient and secure access to Amazon Elastic Container Service (ECS) in production is paramount for maintaining product speed and reliability. Troubleshooting, bug fixes, and incident resolutions rely on rapid data access. However, numerous teams grapple with suboptimal access solutions, leading to both security risks and inefficient workflows. In

Enhancing Rails Console Access: 4 Key Steps to Improve Security and Efficiency

If you're managing access to Rails Console in a production environment through SSH, you might not be aware of the hidden vulnerabilities and inefficiencies that can plague your workflow. In this article, we will discuss the five main issues associated with this approach, their impacts, and provide actionable steps to

Streamlining Postgres AWS CLI Access: 4 Steps to Bolster Security and Efficiency

Access to Postgres databases in a production environment is a critical aspect of ensuring the efficiency and security of your operations. However, using AWS CLI (Command Line Interface) for managing this access can lead to a series of challenges and vulnerabilities. In this article, we'll explore these issues and provide

Securing and Streamlining Postgres Access: 4 Essential Steps to Enhance Efficiency and Reduce Vulnerabilities

If you control access to Postgres in production using kubectl, you may be facing several issues that could have significant impacts on your operations. In this article, we will delve into the five biggest problems associated with this approach, explore the consequences they create, and provide practical steps to reduce

Enhancing ECS Kubectl Access: Tackling Hidden Vulnerabilities in 4 Key Steps

If you're responsible for managing access to Amazon Elastic Container Service (ECS) in production using kubectl, you're likely familiar with the challenges this can pose. In this article, we'll delve into the five major issues that often accompany ECS access management, exploring their consequences and offering practical strategies to mitigate

Optimizing Postgres Jump Host Access: Four Steps to Bolster Security and Efficiency

Access control to Postgres in production environments is crucial for efficient operations. However, many organizations struggle with the complexities and vulnerabilities associated with Jump Host access. In this article, we will explore the five major problems with Postgres Jump Host access, their implications, and practical steps to mitigate these issues.

Strengthening Postgres VPN Access: Unveiling Hidden Vulnerabilities and Effective Solutions

In the realm of managing access to Postgres in a production environment via VPN, there are often numerous challenges that organizations face. In this article, we will delve into the five most prominent problems encountered in this context, explore their implications, and identify practical strategies to mitigate their impact. The

Optimizing MySQL Access: Uncovering and Addressing Hidden Vulnerabilities in SSH-Based Systems

If you're managing access to MySQL in a production environment using SSH, you might be facing several challenges that can impact your workflow, security, and compliance. In this article, we'll explore the five biggest problems associated with MySQL SSH access, their implications, and practical strategies to mitigate these issues. The

Simplifying Postgres Access: 4 Steps to Enhance Security and Efficiency

If you're responsible for managing Postgres in a production environment using SSH access, you might be facing some common problems. In this article, we'll delve into the five most significant challenges posed by this approach, explore their consequences, and offer practical solutions to mitigate their impact. We'll also discuss how

Enhancing MySQL VPN Access: 4 Key Steps to Address Hidden Vulnerabilities

When it comes to controlling access to MySQL in a production environment through VPN, several challenges and vulnerabilities can arise. In this article, we will explore the five most significant problems associated with MySQL VPN access, their impacts on your organization, and practical steps to mitigate these issues effectively. The

Strengthening MySQL Access in Kubernetes: A Comprehensive Approach to Security and Efficiency

Introduction If you're responsible for managing access to MySQL in a production environment through Kubernetes (kubectl), you're likely aware of the challenges it presents. In this article, we'll delve into the five major issues associated with MySQL kubectl access, explore their implications, and suggest practical solutions to mitigate these problems.

4 Steps to Strengthen MySQL AWS CLI Access and Mitigate Hidden Vulnerabilities

In today's fast-paced technological landscape, ensuring swift and secure access to your MySQL databases hosted on AWS is crucial for maintaining product speed and resolving incidents promptly. Unfortunately, many organizations encounter several challenges and vulnerabilities when it comes to managing MySQL access through the AWS CLI. In this article, we'll

Securing Kubernetes Access with AWS CLI: 4 Essential Steps to Enhance Efficiency and Safety

In today's fast-paced world, quick access to the right engineers in a production environment is crucial for maintaining product speed and ensuring the timely resolution of issues. Kubernetes, a popular container orchestration platform, plays a pivotal role in modern software development and operations. Many organizations rely on the AWS Command

Time Based Sessions

In this release (v1.11+) we're introducing time based sessions. It allows a user to request access to a connection during certain period. Let's try this out, first create a connection and configure the review plugin hoop admin create plugin review hoop admin create conn bash \ --plugin 'review:admin' \ --agent

Slack plugin management

Hey everyone, I'm Rogerio and I bring news 🧑🏻‍🎨 Sandro implemented the Slack plugin recently and you can see more about it in this release post, and now we can also manage this plugin on our Web App! Take a look at what it looks like: It's very simple, is it?

Slack Integration Plugin

I'm happy to announce that we have native integration with slack for reviewing connections (v1.10+). After enabling and configuring, it's possible to approve a time based connection or an one off execution directly from slack. In practice, when a user tries to execute a task with a review: hoop

The controversy of using Clean Architecture in Golang

Clean Architecture, by Robert C. Martin (Uncle Bob), is a design pattern for software. It focuses on separating concerns, testing, and maintaining code. But, using Clean Architecture in Golang applications has stirred debate. This is because Golang's philosophy differs from some aspects of Clean Architecture. The main controversies include: 1.

Plugin Management UI Rewrite

Hey, I'm Rogerio and I bring news! 🎉 We just rewrite the entire UI of our Plugins Management and we took the opportunity to create a new feature for you! Now we also can search for any connection inside the plugins management 🚀 Straightens up in the chair and see how it

External Secrets Plugin

We've launched a plugin that allows injecting secrets directly into a session, this allow administrators to have a more secure setup when provisioning credentials. This plugin have two options: * Derived secrets from environment variables inside an agent * Derived secrets from AWS secrets manager The pre-requisite is that secrets are encoded

Connect third-party chat apps to hoop.dev

How about getting to know what happens on hoop.dev directly on Slack? Our bridge can send notifications to third-party apps, like Slack (and much more coming soon). You will need to set up it on your self-hosted hoop.dev and below you will find the necessary information to do

API Client

This release (v1.7.5+) brings an experimental client for administrators to interact with api resources. The goal is having an alternative client for more advance uses like automating the creating of connections or agents, configuring credentials, etc. To view the list of connected agents: $ hoop admin get agents NAME

Add New groups

Hey everyone, I'm bringing a little bright news for you! Now we can add new groups to our users 🎉 It's easy and you can confirm it by this gif, take a look and try it by yourself 🚀

MySQL Native Connections

This release (v1.7+) we're introducing mysql native passwordless connections. This new type of connection allows connecting to a database with any mysql client, from IDE's to applications. System administrators have the capability of configuring database credentials without having to expose to end users. To begin it's very easy: # start

A payment platform's triumph: Balancing autonomy, security, and compliance.

EBANX, a leading payment platform in Latin America, supports diverse payment methods such as credit/debit cards, boleto bancário, and local bank transfers. Global businesses like Airbnb, Uber, and Coinbase rely on EBANX for their payment processing and infrastructure needs in Latam. The challenge: Ensuring security and compliance. With millions

Immutable consistency of monetary data

A mutable database increases the complexity of a system. Immutable data models increase scale and simplify the system. Database updates delete data. Data is lost if we don't have the infrastructure to track changes. We will never know what was there before the update. But there is a better way:

Indexer plugin page on web UI

We just made it available on our web UI a page to use the Indexer plugin and query whatever you need in your sessions using our query search syntax. You can search in inputs and outputs and much more, the results bring you the session it was found and you

How To Craft An IAM Strategy: 6 Learnings From Hundreds Of DevOps Managers

This article explores how to create an access management strategy that gets your team 5x the results you're currently getting with the same efforts. If you implement this framework, you'll see a few benefits: * 3 high-risk security problems mitigated * 2x more time invested in cloud cost optimization * 7 hours saved

Daily Session Indexing Job

This release (v1.3.8+) automatically index the last 45 days of sessions. The job runs at 23h30 UTC daily and the plugin indexer must be installed and enabled for connections. Check it out our documentation for more information.

Indexer Plugin

Hey everyone! Now we can install the Indexer plugin and gain superpowers to find words in our sessions. 🚀 Indexer is a plugin to index the contents of executions (sessions) made by users in which you could use a powerful query syntax to search. Check it out in our documentation. How

Release: Editor plugin

Hi, I'm Rogerio and I bring news 🚀 This is the new plugin, Editor! Now you can have a connected environment with all your connections and increase your productivity in the execution of quick scripts using our Editor plugin. How does it work? Easy, firstly you need to install it from

Session Indexing

This release (v1.3+) introduces a plugin to index sessions of users and an API to search through it contents. This plugin allows more power in auditing and discover how users are interacting with internal services. Let's say as an administrator that you want to search for the keyword migrate

Release: Runbooks Plugin

Hi, I'm Rogerio and I bring news 🚀 This is the new plugin, Runbooks! Now you can integrate any git repository and use scripts from there to run or rerun any time and how you desire. How does it work? Easy, firstly you need to install it from our plugin store

Release: Hoop Desktop App

We have a Desktop App now! 🎉 This Desktop App allows us to connect in Postgres and TCP connections easily and avoid terminal command uses. What does it do? * List all connections of types: Postgres and TCP; * Allow to connect and disconnect on their connections that there's no plugin installed; How

Releases: 1.2.5 - Search session content

We can search the contents of a session by anything in the event stream or by its date. To filter by the content, you simply type what you need and it should as you type to search for your criteria. The search is case-sensitive. To filter by dates, you can

Releases: Introducing Runbooks

This release (v1.2+) introduces runbooks, which are templates that could be run against a connection runtime. With this release, any client could build input types based on a template obtained from a git source. # fetch-customer.runbook.sql SELECT firstname, lastname FROM customers WHERE customerid = {{ .customer_id | squote }} When this

Releases: User and date filters on Audit Plugin

Sometimes you need to be more specific in your search, that's why we brought more filters to the Audit plugin. You can filter for dates in a range or starting or until some specific date you want. And if you're an admin, you can look for sessions of every user

Release 1.1.0

This release introduces plugin hooks, which are standalone go applications leverage by go-plugin. Plugins Hooks are used to extend the functionalities of hoop, a plugin developer can: * Mutate the connection environment variables of a session dynamically * Mutate the connection client args of a session dynamically * Mutate the connection command of

How to Stop Wasting Time Managing VPN Servers

VPN Servers are a great solution to add a layer of security on accessing private networks. They are often used to expose internal services to collaborators, allowing them to perform administrative tasks like querying a database, connecting to a server via SSH, accessing an internal web application. Most of enterprise

How to Replace Jump Servers & SSH Keys With JWT Tokens

Today we're going to talk about how jump servers work and how hoop can be a great alternative to them. Jump Servers are nodes that will grant access to your underline infra-structure services. Imagine that someone from your company need to access a database or an application inside your internal

Access Control Onion

"Great! Now we can move to audit trails", he said with a smile. "Maybe your team should start building or hiring some engineers", I replied to the sec team lead. "Let's take this matter to the CTO", I continued while leaving the room to grab some water. The meeting goal

Runops is now hoop.dev

Use this link if are still using Runops: https://use.runops.io We are starting a new phase. Runops was born to bring more autonomy to developers. We do that by transparently baking security and compliance into tools devs use to perform sensitive operations. So, instead of revoking access to

4 Obstacles Keeping Fintech Developers From Accessing Production Environments

Why can't they access the database? Why can't they access servers? You are only trying to make my job harder. I accused him. I was tired of fighting with the security team. The security team lead stood, saying he was trying to ensure the company could stay in business. I

The 1 Problem That Keeps 99% of DevOps Teams From Creating a Platform

Your internal platform team has a big problem it has no designer or PM. But you think nothing is wrong because "you aren't building a product, you're building a developer platform". I spent ten years building internal developer platforms. A year into founding a dev tool company, I learned the

$1 million is how much your company wastes on bad developer experience

A 50 engineers company wastes 1 million dollars a year on developer interruption. Every time an engineering context switches, it costs the company 50 bucks. Consider a 100k developer salary: * USD 100,000 / year * USD ~8000 / month * USD ~50 / hour The 100k/year isn't counting hunting, hiring, onboarding, ramping, and

4 steps to fix security issues of SSH access to production environments

Fast access to the right engineers in production is critical for product speed. But you have many problems if you control access to production using SSH. Troubleshooting, bug fixes, and incident resolutions depend on fast data access. Unfortunately, many teams use bad solutions for granting access. And it creates significant

3 Lessons Learned From Benchmarking DevOps Teams Of 200 Fintechs

Today I'm sharing an analysis of the sizes of DevOps teams from 200 of the top fintech companies in the world. The goal is to help size your DevOps team by benchmarking successful companies. For companies in the report, find out how you compare to peers. Do you need more

Rethinking RBAC: Part 1

There are two security features any piece of software implement: authentication and authorization. Authentication systems evolved a lot over past years. OpenID, SSO, MFA, Magic links. But authorization is the forgotten child of security. Today we use the same authorization system created in the 70s. AWS IAM. Kubernetes RBAC. Postgres/

Unlocking Developer Productivity in a Fintech Unicorn

The Company: Dock * Industry: Fintech * Size: 1500 people, 1000 in technology * Funding: Almost 300 million USD * Core Business: Provides a range of financial stack components as a service. The Problem: Regulatory Constraints & Developer Autonomy * Regulatory Needs: Dock operates in a heavily regulated environment, requiring PCI certification. * Traditional Approach: A gated

New Dashboard page for admins

We've just released the Dashboard page for admins on our Portal. 🎉 It counts with: * An area where you can see queries running now; * An area with all queries waiting for review; * A list of total queries organised by their status, where you can filter by days; * And above it all,

Releases #26

We moved a lot of furniture from place to place, and we found better locations for lots of stuff in our Portal. So get some water and get ready! Starting with the new templates and reviews page. If you thought, "oh, nice, now they have a review and templates page!

Releases #25

We are improving some visualizations and adding some really cool features to Runops. So ensure you have your seat belt and take that sip of water to stay hydrated while we go through the news! New layout on Connections visualization We added a card visualization, and now it's possible to

No-code Interface for Firestore in Slack: Part 1

Hey everyone! If you are a developer that gets stopped by PMs all the time to do simple Firestore updates, this guide will save you a lot of time. Or, if you are a PM that wants to get less things through the dev team and faster delivery for your

No-code Interface for Firestore in Slack: Part 2

This is Part 2 of the series, check out Part 1 before continuing. All right, let’s do it! For context, in Part 1 we set up a Runops connection to Firebase which helped us to update Firestore adding a new Whitelabel into our Feature Flag system. And the structure

Releases #24

We got some updates on the new task page for y'all! * We did some design updates and added some features to the new task page. So buckle up because it's the first step to improving a lot more stuff in there: * We added a fancy pants Combobox component to the

AWS ECS execute-command vs Kubernetes kubectl

The ability to run commands inside a running ECS task was one of the most requested features of the ECS service. Yet, AWS released a pretty bad implementation if we compare it to alternatives like Kubernetes. Some of the key problems: 1. AWS ECS execute-command requires installing a ssm manager

Releases #23

The new year is here. We want to celebrate with you by sharing exciting new features that will make your life a whole lot easier. Happy 2022 and let's dive in! Run tasks in the Runops Portal Use a large canvas to edit your scripts, logs loading automatically right bellow,

Releases #22

Presenting: The Runops Web App! You can now use Runops in the browser! The web app experience is live for a few weeks and the feedback has been fantastic. Here are some of the things users love in the web app: Tasks Inbox You can view your Tasks' history in

Welcome Groups, farewell Teams and Roles

We simplified the Runops authorization mechanism! Now, instead of controlling access to Connections using roles, and reviews with teams, you use only one property: groups. Plus, we added the capability of controlling access to templates using groups. What are groups? Groups are a simple concept to grasp and will enable

Append keys to existing Secret in AWS Secrets Manager

The AWS update-secret operation for Secrets Manager replaces all keys of a secret with the new value provided in the --secret-string. But sometimes we want to add a few extra keys, without replacing values already present in a secret. In this post we show how to use bash to add

Releases #21

Runops REPL! No more typing the same boilerplate when running Tasks. Connections without reviews return the logs of a Task right the way. We added a new command to the CLI: runops tasks repl  -, where you can start an interactive session with your Connection. In the REPL session, you

Releases #20

We are excited to announce many of the top requested features that we released over the last few weeks. Let's dive in! Runops API is out You can start using the Runops API to build automations and integrate them with your existing tools. The list of endpoints and their specification

Releases #19

We have been working hard the past couple of weeks to get this release out, and it's finally here! The new Runops agent is available, and it brings huge improvements to the Runops experience. We also launched a new version of the web app to get metrics and graphs on

The Costly Mistakes Fintechs Make When Trying To Improve Security

Time to call a DevOps engineer to get permission or have them run the patch. The worst thing that can happen to an engineer is to get paged out-of-hours only to realize they can't fix the problem on their own. They did all the hard work of waking up, debugging

Releases #18

📚 Revamped documentation website We completely revamped the Runops documentation website. It's now easier to navigate and has a better design. We also enabled the chat support widget to the docs. Now you can reach out anywhere in the docs to talk to us. The new website is also hosting our

Releases #17

🎯 Select Task type in Slack You can now override the type of a Task in Slack. We added a new menu option that you can use to change the type from what is set in the Connection when creating a Task in Slack. It's an optional field, so if you

Releases #16

Improved logs experience in Slack, Connections pagination in Slack, improved analytics and security 📀 Logs in Slack We improved the delivery of logs in Slack. The Task logs are now delivered as an attached file to Slack for logs with less than 5MB in size. You can see the results directly

Releases #15

🪛 Enhanced Templates execution We fixed a bug that prevented Templates from running when the number of Templates in the Github repository increased. Templates now run faster and there is no limit to the number of Templates in the repository. We also updated the CLI experience: the Templates list now return

Releases #14

ECS exec Tasks, CLI Sign Up, Compliance enforcement, and major CLI experience improvements. 📇 ECS Exec commands integration You can now use Runops to access running containers in AWS ECS, using the ECS exec feature recently launched by AWS. This means that you can get a shell inside ECS containers without

Releases #13

This week we focused on a big improvement to the logs! 🧽 Gigantic logs improvement We removed all the clutter present in the logs of every Task. Now the logs from your tasks will get just what came back from your command. No additional clutter making it hard to find the

Releases #13

This week we focused on a big improvement to the logs! 🧽 Gigantic logs improvement We removed all the clutter present in the logs of every Task. Now the logs from your tasks will get just what came back from your command. No additional clutter making it hard to find the

Releases #12

Big improvements to logs, Azure and Terraform integrations, create tasks from Slack, and more! Another week packed with big enhancements to Runops! Let's dive in 🤿 🪵 Unlimited task log size We removed the 5MB limit to the size of Task result logs. For large results that don't fit in a Slack

Releases #11

CLI OAuth 2.0 authentication and data security improvements 🔐 CLI OAuth 2.0 authentication Now you can authenticate in the Runops CLI using Google, Github, or a custom username + password of your choice. This is an improvement over the previous key-based authentication. Now we only store Bearer tokens locally. Tokens

Releases #10

Create new users from Slack and synchronous Tasks execution. This week brings two important updates that will make Runops a lot better. 💬 Create new users from Slack Now everyone in your Slack workspace can join Runops, automatically! Anyone can type the /runops register command anywhere. We will ask for a

Releases #7

Big week: non-technical workflow in Slack, CLI 0.2.0, better Task statuses, and more. I'm excited, this was one of our biggest weeks for releases. With today's releases, we enable non-technical workflows. Non-engineers can start leveraging Runops! Making a SQL query or a python script available for Customer Success

Releases #6

This is a special week. We launched on Product Hunt, check it out! Some of the updates: * 🚀 Partial support to running Templates in Slack, let us know if you want early access. * 🐘 🐍 Added 2 new Task types: Postgres with python and MongoDB, check them out * 🐞 Fixed bug of large Tasks

Releases #5

Great week, here are some of the highlights: * 🥨 Added Templates interactions in Slack: list and help (more coming next week!) * 🚨 Improved error messages for Task reviews * 📲 Send notification to the creator of a Task when it's fully approved * ⚙️ Get new self-hosted runner tokens for existing Connections * 🛠 Improvements to our logging

Releases #4

Packed week! Here are some of the things that you can do: * 🏃 Create self-hosted runner tokens in the CLI * 🎯 Configure Slack review channel per Connection * ⚙️ Opt-in to use the Runops-distributed Slack app We also: * 📚 Improved Quick Start guides * 💬 Fixed bugs in the Slack channel name validation As always, we would

Releases #3

A few more updates of the past few weeks: * 👾 Improved the experience of the CLI install script * 🎯 You can now configure Connections to skip reviews! This is great to provide access to read-only resources and leveraging the PII data filter. * 👨‍🎨 We revamped our landing page * 💬 Improvements to our Slack app

Releases #2

More updates! * 🚀 We released the Templates feature. * 👾 Added support to kubectl Tasks * ⚡️ Major stability and performance enhancements * 🗺 Improved docs navigation with indexes and menus * 🎯 Added support to optional reviews for specific Connections * 🚧 Removed annoying message about GET requests from some CLI commands As always, please let us know what you

Releases #1

Sharing a few updates we made in the last few days to make sure you don't miss them: 🎯 Create, list, and update Connections using the CLI 📝 You can read an early version of the docs for Tasks Templates 🔒 We published the docs on how to connect to private Connections using