• Performance Profiling Zeebe

    We frequently get questions about Zeebe’s performance. The answer to any performance question is easy: “It depends“. In this post, Zeebe Developer Advocate Josh Wulf and Zeebe Community member Klaus Nji talk about what it depends on, and how you can get performance benchmarks that answer the question that you actually want to answer: “Can Zeebe do what I need it to do, and how do I need to configure it to do that?“ As Albert Einstein famously said: “There are lies, damned lies, and then there are benchmarks” (or was that Aristotle?) Every system has a performance envelope. It is multi-dimensional, and its boundaries change in response to different variables. How the boundaries change and the rate of that...

    Read more
  • Reporting Security Issues

    Maintaining the security of Camunda BPM is an important task for us. In our documentation, we have published our Security Policy which explains how we deal with security issues. Besides our proactive efforts, it is very valuable to us when we get feedback by the community about security issues which may exist in Camunda itself (or much more commonly) in one of the libraries and dependencies we are using. When you report security issues, we can investigate them, assess their impact on different usage scenarios, provide fixes and publish a security notice. To give you an example: In January, Kai Ullrich from Code White approached us and reported that using Camunda’s API, it is possible, once authenticated, to submit a...

    Read more