Award nominations

Participating events

No information about participating events


No members


About technology

Launched in November 2017, InSpec is the first step in Chef’s “detect, correct, automate” approach to cloud migration and continuous automation. It helps organizations maintain an up-to-date view of compliance status in production, detect security issues long before they reach production and reduce risk while delivering applications faster. It is an open-source testing framework for infrastructure, with a human-readable language for specifying compliance, security and other policy requirements. In February 2018, Chef launched InSpec 2.0, adding cloud configuration testing (including Microsoft Azure and AWS), more than 30 new conformance capabilities, enhanced integration with third-party tools and improved ease-of-use and customizability. In October 2018, Chef announced the latest version, InSpec 3.0 with significant updates to the platform, including a new plugin architecture, greatly improved ease-of-use, improved exception management and automated compliance for Terraform. Niu solutions, a UK-based company that offers IT managed services specializing in regulated industries including retail, financial services and banking, started applying InSpec to drive greater efficiency and eliminate risk in compliance checking. InSpec gave Niu a real-time view of compliance, helped them encode best practices, and enabled them to remediate errors quickly. Niu found they could reduce the time taken to conduct compliance checks by 93%, saving them nearly three person-days of work for every 100 devices checked. The impact goes beyond efficiency to a cultural change at Niu. The full Niu case study can be read here: https://www.chef.io/wp-content/uploads/2017/09/Chef_NUI_solutions_v02.2.pdf

Press and media coverage

eWeek: Chef Launches InSpec 2.0 to Improve Security Compliance Automation TechCrunch: Chef InSpec 2.0 helps automate security compliance in cloud apps TechTarget: Chef InSpec users wrestle with compliance as code TechTarget: Chef InSpec widens the compliance-as-code possibilities with v2.0 Dataversity: Chef InSpec 2.0 Delivers Compliance at Velocity to Accelerate DevSecOps The New Stack: Chef InSpec 2.0 Puts the Security into DevSecOps TheVARGuy: Chef InSpec 2.0 Adds Cloud Compliance Automation Support InfoQ: Chef Enhances Cloud Security Automation in InSpec 2.0 SD Times: Chef announces InSpec 2.0 with new DevSecOps capabilities CSO: Review: How InSpec 2.0 delivers comprehensive compliance Silicon Angle: Chef Software bids to automate compliance with new InSpec 2.0 release TheServerSide.com: Chef's InSpec 2.0 brings compliance automation to the cloud JavaLobby: InSpec 2.0 Delivers Compliance at Velocity to Accelerate DevSecOps DevOps.com: Chef Advances Compliance Automation Geekwire: New version of Chef’s open-source project InSpec lets you check for leaky cloud storage buckets VMblog: VMblog's Expert Interviews: Chef Talks Compliance Assessment and Remediation Survey Results DevOps.com: Chef Extends Scope of Compliance Automation TechTarget: Chef InSpec 3.0 horns in on Terraform territory Dataversity: InSpec by Chef 3.0 Accelerates Compliance Automation for DevSecOps The New Stack: Chef InSpec 3.0: Wider, Deeper on Automated Compliance SecurityWeek: Chef Launches New Version for DevSecOps Automated Compliance