VOOZH about

URL: https://docs.datadoghq.com/internal_developer_portal/use_cases/appsec_management/

⇱ Manage App and API Protection Posture Across Development Teams

For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/internal_developer_portal/use_cases/appsec_management.md. A documentation index is available at /llms.txt.

Manage App and API Protection Posture Across Development Teams

This product is not supported for your selected Datadog site. ().

The Catalog enables organizations to seamlessly incorporate security into every development stage, ensuring a strong security posture across teams, applications, and systems.

Catalog surfaces and centralizes security signals, enabling developers to prioritize actions and address vulnerabilities promptly. Meanwhile, managers can oversee risks, drive improvements, and ensure organizational compliance.

Build secure applications by design

Catalog provides default paths and guardrails to helps teams create, assess, and improve secure processes. Developers can scaffold new services or integrate cloud resources confidently, assured that security standards are enforced at every step.

For services instrumented with APM, APM Security Views automatically detect services vulnerable to application attacks, such as SQL injections, SSRF, or Log4Shell attacks. You can use APM Security Views to investigate each service and type of attack your organization encounters, understand the associated security risks, and effectively manage your application attack surface with runtime context.

Track third-party software and dependencies

Catalog organizes and highlights third-party dependencies, ranging from open-source libraries to programming languages. Teams can monitor versions, launch upgrades, and proactively address vulnerabilities.

  • DevSecOps: Use Catalog to track dependencies and spearhead upgrade initiatives.
  • Managers: Access real-time reports on upgrade progress and compliance.
  • Developers: Incorporate dependency updates into daily workflows with minimal disruption.

Configuration details

  1. Click a service in Catalog to open the service side panel.
  2. Select the Performance tab at the top of the panel.
  3. Find the Libraries sub-tab, which lists all external libraries used and their versions.

Further reading