While teams are overwhelmed by vulnerability assessments, they rarely understand how popular vulnerability scanners arrive at these determinations. Using popular container scanning tools for illustration, we will break down how your tooling goes from beginning a scan to delivering findings. From that foundation, we'll work through how to read bulletins for a particular CVE and understand what the technical language means. Finally, we'll work through how teams can ensure that the results are accurate and applicable.

This webinar will help you:
- Understand how vulnerability scanners work
- Read CVE bulletins like a pro
- Evaluate vulnerability scans to address concerns

Speaker: Neil Carpenter
Field CTO, Minimus
Neil helps organizations identify and contain security risks in their cloud estates. His passion for getting ahead of security problems comes from over a decade of leading customer-facing security incident response teams at Microsoft and seeing what happens when attackers win. Neil also helped build the future of cloud-native security at Twistlock, StackRox, Torq, and Orca Security before joining Minimus. When he's not in front of a computer, Neil is an avid NYC-based street photographer.

Platform Engineers NYC

Luca

How to watch the watcher: Investigating vulnerability scanner reports 101

Online event

The EU's Cyber Resilience Act (CRA) is one of the most significant regulatory shifts for software manufacturers in recent history - and the clock is ticking. With mandatory reporting obligations kicking in September 2026 and full enforcement by December 2027, organizations selling products with digital elements into the European market need a concrete compliance strategy now.

This webinar explores how platform engineering teams are uniquely positioned to operationalize CRA compliance - turning regulatory obligations from the security and compliance teams into frictionless, automated workflows that developers will actually adopt.

You’ll learn how to:

* Understand the CRA's key deadlines and what they mean for your engineering division.
* Embed CRA requirements inside IDP so devs can ship compliantly without slowing down.
* Wire SBOM creation, CVE scans, and alerts into the CI/CD to meet tight reporting windows.

Cesar Herrera

wjrandolph

Bolaji Vincent

Mehboob Alam*

How platform engineering unlocks CRA readiness

Platform Engineering Global Network

Groups

{PRO_NETWORK_NAME} is on Meetup Pro with more than {PRO_MEMBER_COUNT} members across {PRO_GROUP_COUNT} Meetups worldwide. Meetup Pro is the professional tool for organizing and communicating a network of users, partners, contributors and members.

Platform Engineering Global Network

The global home for Platform Engineers

Who we are

Upcoming events

Who we are

Groups