Microsoft subsidiary, GitHub, rolled out its secret scanning service to all users on Dec. 15. This service was previously available only to GitHub Enterprise Cloud users with a GitHub Advanced Security license. GitHub’s secret scanning looks through public repositories for over 200 token formats. In 2022, GitHub alerted its partners to over 1.7 million security exploits.
“Secret scanning alerts notify you directly about leaked secrets in your code. We’ll still notify our partners for your fastest protection, but now you can own the holistic security of your repositories,” read the GitHub blog.
Users will also get two-factor authentication (2FA) security feature in March 2023. GitHub had previously announced that it’d implement 2FA for high-impact package maintainers in Nov. 2022. However, it recently outlined 2FA’s wide-scale implementation across its 94-million user base.
The rationale behind GitHub’s free scanning tool is to prevent secrets and credentials compromises. A “secret” is a token or an authentication tool. Developers rely on them for communication with external services. Secret scanning takes place in Git history and all its branches.
As per the GitHub document, the secret scanning tool looks for known security vulnerabilities. This is something to keep in mind as a caveat, given that vulnerabilities can also be unknown (found only months after they occur).
That said, users can implement secret scanning alerts through “Code security and analysis” settings. Already exposed secrets are present under the “Vulnerability alerts” section. When you select any of the exposed secrets, you can view the exposure type and the remedial action you need to take.
Users and partners get different forms of secret scanning on GitHub. Users constitute:
On the other hand, partners get an alert when the same file has two keys. GitHub works with a number of partners to find exposed secrets. GitHub automatically alerts its partners when secret scanning detects a secret in a GitHub commit. The platform currently works with over 100 partners, including Adobe, Azure, Atlassian, Dropbox, Discord, Hubspot, Meta, Shopify, Stripe, etc.
According to IBM, leaked credentials are the most common type of data breach. These data breaches cost more than $150,000 than the average data breach and take 327 days to identify. The IBM report, cited by GitHub, highlighted that 83% of companies could suffer from one or more of these data breaches. The report further recommends using automation tools, which can cut threat identification times by 74 days.
Leaked secrets are especially worrying in the context of the software supply chain. Google recently released a report concerning the software supply chain and open-source dependencies. With open-source software in wide circulation, a compromised commit can affect all developer dependencies. Moreover, the line between commercial and public software is growing thinner as commercial entities begin relying on open-source code.
Companies using open-source code allow cybercriminals an increasing number of attack vectors. Sadly, organizations cannot reduce these dependencies without also reducing operational efficiencies. Enforcing 2FA can be the best bet for companies in such a situation. And that’s what GitHub is working on implementing in the next phase to reduce the damage from attacks that target related software systems.
In addition to free secret scanning, GitHub is also rolling out 2FA from March 2023 to all code contributors. 2FA increases network security by asking users for an additional passcode before logging them into an application. This stops cybercriminals from compromising a network unless they gain access to either the physical device or application.
The following user classes will be able to use 2FA:
By the end of 2023, 2FA will be mandatory for all users, including people who publish code on the platform — everyone will have to fulfill a 2FA login. Users who fail to enable 2FA will have 45 days before they’re blocked from using GitHub features. Overall, 2FA will make the software ecosystem safer for all parties. As a bonus to this, GitHub, like Google, is also adding passkey support, which is an alternative to passwords.
Alex Weinert, Microsoft’s Director of Identity Security, said that an account using 2FA is 99.99% less likely to be compromised, whereas cybercriminals always compromise passwords. Microsoft research further stated that using powerful passwords doesn’t prevent compromises, but it’s still better than weaker passwords.
Google research also indicated that “adding a recovery phone number to your Google Account can block up to 100% of automated bots, 99% of bulk phishing attacks, and 66% of targeted attacks that occurred during our investigation.”
Identity management is a significant issue. The debate around it will get even more heated as we increase the adoption of online authentication. GitHub has committed itself to protect its users’ and partners’ identities by rolling out 2FA and secret scanning, laying down an example for us all to follow.
The CEO of Zurich Insurance, one of Europe’s largest insurance companies, has said that cybercrime could soon become uninsurable, warning that the risks surpassed climate…
Read More »
Facebook owner, Meta, has agreed to a $725 million settlement in relation to the longstanding Cambridge Analytica scandal that first emerged in 2018. Facebook allowed…
Read More »
Ireland’s Data Protection Commission (DPC) has launched a Twitter inquiry after a breach affected over 5.4 million users through an API vulnerability. DPC launched the…
Read More »
A recent report from Prodaft has unveiled FIN7 as one of the deadliest cybercrime groups on the planet, with a particular emphasis on breaching corporate…
Read More »
Your email address will not be published.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
document.getElementById( “ak_js_1” ).setAttribute( “value”, ( new Date() ).getTime() );
Join Our Newsletters
Learn about the latest security threats, system optimization tricks, and the hottest new technologies in the industry.
TechGenix reaches millions of IT Professionals every month, empowering them with the answers and tools they need to set up, configure, maintain and enhance their networks.
Copyright © 2022 TechGenix
If you’re on a Galaxy Fold, consider unfolding your phone or viewing it in full screen to best optimize your experience.
Credit Cards
Banks
Brokers
Crypto
Mortgages
Insurances
Loans
Small Business
Knowledge
Construction management software includes many different types of platforms, from all-encompassing solutions to tools that focus on one aspect of construction. This guide will help you find some of the best construction software platforms out there and provide everything you need to know about which solution may be best suited for your business.
Ranking construction management software isn’t easy because in this industry, everyone needs something different.
Construction management software is a broad category. Some platforms — like Procore and RedTeam — are all-encompassing solutions that cover every aspect of construction management, from bidding to the last coat of paint.
Others, like Raken and BIM 360, focus on one aspect of construction such as daily reporting, document management, or building design. While they handle these tasks well, you might be disappointed if you were hoping for a construction project management solution that can handle all aspects of your job — or, at the very least, you’ll have to pay extra to get other software that can supplement it.
And still others, like CoConstruct, are focused on only certain types of construction. As a result, a solution may include some construction management tools you don’t need yet and be lacking in some you do.
All of that is to say that, while we can rank these software solutions by how well they do as general construction management platforms, it’s important for you to dive into the reviews to determine which solution best fits your business.
CoConstruct is currently our top-rated construction software option thanks to the fact that it’s very easy to use, covers all aspects of construction management, and offers good customer support. CoConstruct is packed with features, and most companies should be able to afford its price tag.
CoConstruct is aimed at homebuilders and remodelers, so those in commercial construction may not get as much out of the software.
However, many of its features are based on what every construction manager needs, such as bids, change orders, project scheduling, communication with clients and subcontractors, documentation, and more.
CoConstruct’s change orders page. Image source: Author
Key feature: Change orders can be a pain, so one of the welcome aspects of CoConstruct is the fact that it’s easy to create change orders. Also, you can get sign-offs from clients virtually, preventing unnecessary hold-ups.
While PlanGrid isn’t a comprehensive construction management platform — instead focusing more on the document management aspect of things — it’s a strong software option for those looking to more easily store, share, and edit blueprints and drawings.
The software is easy to use and boasts solid customer support. If you need a platform that can manage a mess of paperwork, you can’t do much better than PlanGrid. Just be prepared to pay for additional software that can handle other aspects of construction management to supplement it.
PlanGrid’s blueprint editing tool. Image source: Author
Key feature: The ability to mark up plans and drawings is definitely a standout feature. The software eliminates the need to pass around PDFs via email and helps manage the clutter every construction manager has to deal with.
Raken is primarily focused on tracking a project and daily reporting, so it may not handle all aspects of construction management, but it will help any manager stay on top of an ongoing project. It also scores well in terms of ease of use, and it will help with time cards and safety training as well.
You can sign up for a free trial, and it’s relatively inexpensive, so it’s a good option for those with a limited budget who want to make sure they’re making the right choice before fully committing. The software integrates well with other construction platforms such as Procore or Oracle’s Aconex.
It also has one of the best construction project management apps out there if you prefer to operate off your mobile device.
Raken’s main activity feed. Image source: Author
Key feature: Daily reports are the bread and butter of Raken. You’ll be able to track time and products, upload photos of the job site, and make notes, all while operating from the cloud.
RedTeam is another all-encompassing construction management solution that can help you with everything from managing your bids to actually running the project.
Its price tag makes this option more suitable for large enterprises, but if you can afford it, it offers the features you’ll need to run a construction project end to end.
RedTeam is primarily geared toward those in commercial construction and offers features ranging from financials and design to scheduling and field reporting.
RedTeam’s manage opportunities tool Image source: Author
Key feature: Unlike a lot of construction software solutions, RedTeam offers sales and construction marketing tools, including an “Opportunities” section that allow you to manage customers.
Buildertrend handles all aspects of a construction business and has an intuitive dashboard that you’ll pick up quickly. Its customer support is a big selling point, as you’ll get assigned a coach who will help with onboarding and technical issues.
For mid-sized firms to large enterprises, the pricing is attractive — but for very small contractors, it’s a bit on the high end. This software is ideal for juggling multiple jobs at once, with a dashboard that makes it easy to manage a team of workers.
Buildertrend also has a sales module, which is not something offered by all software platforms.
BuilderTrend’s project dashboard. Image source: Author
Key feature: Builderetrend’s jobs menu does a great job of putting everything you need to know about a project in front of you. It’s easy to navigate between jobs, and you can always dive into more detail if you want to.
When it comes to features, Procore can’t be beat. This giant in the construction software industry offers powerful software that will help any construction manager handle complex projects. It’s expensive, but there are few options out there that do a better job of managing all aspects of a construction project.
Procore may actually offer too much if you’re just a small construction company with just a couple of people, so it’s best to get a demo first to determine if it suits your needs.
Procore’s custom reports tool. Image source: Author
Key feature: Procore’s custom reports are impressive. You can create reports by dragging and dropping specific data points, which means there are nearly unlimited ways to break down data and spot opportunities for improving your business.
Sage 300 Construction is packed with powerful features, although it does come with a steep price tag.
It’s a Windows-based platform rather than cloud-based, which may be a dealbreaker for some construction managers, but it will offer just about every functionality you might need as a construction manager, whether that be change orders or human resources or even inventory management.
Sage 300’s main dashboard. Image source: Author
https://www.youtube.com/watch?v=kOLcLTgqVqk
.
Key feature: Sage’s financial tools make life a lot easier for construction managers. You can get an overview of your financial performance, and the software will send you an alert if, for example, the project drops below a profitability threshold.
BIM 360 is narrowly focused on the architectural and engineering side of construction, so it won’t meet all the needs of a construction manager.
However, it handles its core function really well, allowing you to do extensive modeling of your project and ensuring everything is designed properly at the outset so you don’t run into problems in the middle of the project. There’s a bit of a learning curve, but fortunately, it has strong customer support to help you.
BIM 360’s project management page. Image source: Author
Key feature: BIM 360’s publishing and viewing functions are top notch. The software can handle any file type, and you can share these files with anyone who has the proper permissions. The software also enables you to track updates and view previous versions.
Construction management software tends to vary greatly — some focus on being an all-encompassing solution for construction managers, while others aim at excelling in one particular area, such as document management or job monitoring.
As a result, comparing them can be tough. However, we’ve settled on these three aspects in particular when it comes to our reviews.
The job responsibilities of construction managers can vary significantly, but almost all of them deal with project management. As a result, we look for software that handles important aspects of project management such as scheduling and job site monitoring.
Software that doesn’t deal with project management because it focuses more narrowly in other areas won’t score as highly in our “features” category, even though those solutions may have plenty of customers who are perfectly happy with the product.
More than many other software categories, construction software varies widely in terms of pricing — not just in terms of how expensive it ultimately is, but also in the pricing structure.
Some sell monthly subscription fees, others make you pay an annual fee based on how many users you have, and still others will let you just purchase the software and price it based on how many “modules” you buy.
We’ll break down the pricing for each option so you can figure out how much you’ll probably end up paying.
No matter the industry, ease of use is of the utmost importance when it comes to software. It doesn’t matter how powerful it is — if you can’t figure out how to use it (or if it will take months to get your crew to figure it out), the software will be a net negative for your business.
A total of 40% of the score for each of the software options is based solely on how easy and intuitive we found that platform to be.
Why spring for construction management software? Why not just keep using a spreadsheet? There are a number of tremendous benefits you might not know about.
The ability of construction software to handle document management alone will save a huge amount of time. Many software options will manage your blueprints and permits in one place, and make it easy to share them so you’re not passing around PDFs or PNGs via email.
When a project runs into a problem, such as necessary materials being unavailable or not enough workers for a project on a specific day, you end up with delays, and that means money wasted.
If you want to increase your bottom line, the best way to do it is to implement a software solution that will make you more organized and efficient.
Have you ever made a huge mistake with payroll, or misplaced a permit you need in order to proceed with a project? That can cause major problems for your business. Software keeps all of this organized and ensures you’re not missing anything.
DP Taylor has a passion for good business software and wants to help software users find the solution that best fits them. He likes to understand people’s personal and business needs and figure out how software can solve problems. When he’s not studying the world of business, he can be found hiking.
We’re firm believers in the Golden Rule, which is why editorial opinions are ours alone and have not been previously reviewed, approved, or endorsed by included advertisers. The Ascent does not cover all offers on the market. Editorial content from The Ascent is separate from The Motley Fool editorial content and is created by a different analyst team. The Motley Fool has a Disclosure Policy. The Author and/or The Motley Fool may have an interest in companies mentioned.
The Ascent is a Motley Fool service that rates and reviews essential products for your everyday money matters.
Copyright © 2018 – 2022 The Ascent. All rights reserved.
Canopy Workflow introduces new industry-leading automation to streamline and simplify workflow processes for accounting firms
DRAPER, Utah–(BUSINESS WIRE)–Canopy, the leading cloud-based practice management platform for accounting professionals, today announced the availability of new automation enhancements to its Workflow software. Canopy’s Workflow automation helps firms streamline the delivery of accounting services by reducing manual, repetitive processes leading to increased efficiency and accuracy.
By incorporating automation across accounting firms’ workflows, professionals have better visibility of their processes, optimize their time to get more done, and are able to use the time saved to focus on higher-value and more profitable efforts. The robust capabilities of Workflow automation are also extremely effective as a holistic practice management solution, working across the firm to ensure information is retained and the user experience is simplified.
“As accounting firms grow, they experience more complex workflows due to more clients, more internal staff, more projects, and ever-changing regulations. Managing these complexities can be time-consuming, but these new features make that experience significantly easier for firms,” said Larry Furr, Chief Product Officer, Canopy. “These updates are part of our continuous endeavor to make accounting processes as easy as possible for professionals in the industry. Workflow automation will drastically reduce time spent on a myriad of tasks and is built directly within the Canopy Practice Management suite.”
Automation
These new enhancements improve the experience of Canopy’s Workflow by allowing professionals to set automated rules for tasks based on conditions and the desired action. For example, workflow users can choose to assign a team member a specific task directly after a previous subtask has been marked as complete, helping ensure staff only see tasks they are able to work on.
Additionally, these updates will:
About Canopy
Canopy is an award-winning, cloud-based accounting practice management software suite designed to increase efficiency and boost revenue for accounting firms. It offers tools for client management, document management, workflow, and time & billing, as well as specialty compliance solutions that help accountants obtain IRS transcripts and resolve notices quickly. Canopy was ranked by Capterra as the #1 Top Performing Accounting Practice Management Software in 2022 and included in The Women’s Tech Council’s 2022 Shatter list, highlighting Canopy’s inclusive and diverse culture of innovation and well-being. Canopy’s solutions are SOC2 certified and data encrypted to ensure personal information is secure. Connect with us @CanopyTax and https://www.getcanopy.com/.
Jenny Olson
mPR, Inc. for Canopy
310-773-2568
jenny@mpublicrelations.com
Jenny Olson
mPR, Inc. for Canopy
310-773-2568
jenny@mpublicrelations.com