Lisa Haas

AppSec misconceptions about AI security and the build-time choices that matter.

AI broke AppSec’s assumptions: non-determinism, agent overreach, black-box models.

Real AI security incidents and what they reveal about traditional security control gaps.

Gartner’s 2024 Hype Cycle for Application Security: ASPM moves from peak to trough.

Mend.io is recognized as a Visionary in the 2023 Gartner Magic Quadrant for Application Security Testing. Learn about their approach.

Learn about Mend SCA integration within Amazon CodeCatalyst for enhanced application security. Simplifying AWS vulnerability detection.

Mend, formerly WhiteSource, focuses on automating application security with a remediation-first approach for open source and custom code.

Learn about our innovative approach to detecting and remediating custom code vulnerabilities for a more secure future.

Get answers to the top 8 BSD License questions in this blog. Learn about the terms, compatibility with GPL, copyleft status, and more.

Get answers to the top 10 Common Development and Distribution License questions. Learn about CDDL terms, compatibility, and more.

Discover the top 10 Microsoft Public License (Ms-PL) questions answered on this blog. Learn about terms, copyleft, compatibility, and more.

Get all your questions about the Eclipse Public License answered. Learn about its terms, compatibility, and differences with other licenses.

What can be done to better balance between security and agile development? What steps can be taken to ensure agile development processes are done in a secure manner?

Learn why using components with known vulnerabilities is a major issue in application security and how to address it with OWASP guidelines.

Explore the aftermath of Heartbleed, and the importance of managing open source components for security.

The top 9 questions about GNU GPL with the Classpath exception. Learn how to use GPL’ed license components without risking your IP.