For teams that use a DevOps model, fast, predictable deploys that can be safely rolled back are important for security, for this reason.
If deploys are like playing Jenga on a sailboat, you're not going to be able to patch fast or safely.
That said, even becoming aware a CVE exists in the first place is still a problem for many teams. There are plenty of good options, it's just underinvested in early on.
If deploys are like playing Jenga on a sailboat, you're not going to be able to patch fast or safely.
That said, even becoming aware a CVE exists in the first place is still a problem for many teams. There are plenty of good options, it's just underinvested in early on.