Aurora Starita

Learn about Static Application Security Testing (SAST).

Learn how AppSec teams can extend existing security and compliance practices seamlessly to AI.

An overview of the top vulnerabilities affecting large language model (LLM) applications.

See how Mend SAST's AI powered automated remediation eliminates vulnerabilities with speed & accuracy.

CVSS base scores are up in the latest version of the scoring system. What does that mean for AppSec practitioners?

Backstage offers wide views and controls across the development process and with the Mend.io plugin, deep insights into application risks overall or by project.

A quick guide to the Known Exploited Vulnerabilities (KEV) catalog.

Explore our application security complete guide and find key trends, testing methods, best practices, and tools to safeguard your software.

Explore how to use open source software to innovate while minimizing risk.

Learn how to protect your application’s code with dependency management.

Keeping dependencies up to date is a big part of dependency management, but it's not everything. Learn more about the differences between the two.

Worried about attackers using AI models to write malicious code? Here are three other ways AI model use can lead to attacks.

Not all "open" AI licenses are truly open source. Learn more about the most popular licenses on Hugging Face.

Learn more about supply chain threats and where to find them.

Learn about this family of licenses that seek to limit harmful use of AI models.

We're not saying the NVD is dead but it's not looking good.