• Platform
    White hat hacking – not what you expect - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    White hat hacking – not what you expect - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    White hat hacking – not what you expect - ai
    Mend AI Secure AI powered applications
    White hat hacking – not what you expect - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    White hat hacking – not what you expect - dast icon 1 DAST White hat hacking – not what you expect - apis icon 1 API security White hat hacking – not what you expect - eol icon EOL support
    Platform Benefits
    White hat hacking – not what you expect - repoi icon Repo integration Scalability-icon Scalability White hat hacking – not what you expect - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    White hat hacking – not what you expect - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    White hat hacking – not what you expect -
    System prompt hardening Prevent prompt injection and misuse
    White hat hacking – not what you expect - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    White hat hacking – not what you expect - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    White hat hacking – not what you expect - red teaming guide featured image
    AI Red Teaming Practical Guide
    White hat hacking – not what you expect - featured image
    A CISO’s Guide to Securing AI from the Start
    White hat hacking – not what you expect - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
    White hat hacking – not what you expect - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo
Blog Tiffany Jennings

Tiffany Jennings Head of Content

Tiffany Jennings is Head of Content at Mend.io. She oversees editorial strategy and thought leadership across Mend.io’s digital channels, bringing complex AppSec topics to life through creative storytelling, expert insights, and helping technology find its human voice.
White Hat Hacking – Not What You Expect - blog pic

White Hat Hacking – Not What You Expect

Tiffany Jennings Jan 19, 2021
Application Security

Discover the world of white hat hacking and the importance of ethical hackers in open source projects.

Read More
White Hat Hacking – Not What You Expect - aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzYwMDAzZDNmYTQ4MWMucG5nJnZlcnNpb249MDAwMCZzaWc9NDdhM2Y3YTk4NGUyNzdjODZmZjM2YjIyNzZjMGMzN2E

How to Set Up an Open Source Strategy

Tiffany Jennings Jan 14, 2021
Open Source Licenses

Learn how to set up an open source strategy for your software development org. Understand the key considerations, and implementation steps..

Read More
White Hat Hacking – Not What You Expect -

CVE (Common Vulnerabilities and Exposures) — What is it and how to understand it

Tiffany Jennings Jan 7, 2021
Open Source Security

What are CVEs and how are they published? What kind of information do CVEs offer about security vulnerabilities in publicly released software?

Read More
White Hat Hacking – Not What You Expect - aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzVmZjZkYTAxNmE5OTUuanBnJnZlcnNpb249MDAwMCZzaWc9NDA0OTg1MWQ1NDU5ODg5ODhlMDY2MWRjZDkwMzdhYzQ

The 10 Best Security Conferences to Attend in 2021

Tiffany Jennings Jan 7, 2021
Application Security

Discover the top 10 security conferences to attend in 2021, whether in-person or virtually.

Read More
White Hat Hacking – Not What You Expect -

Top 10 Open Source Vulnerabilities In 2020

Tiffany Jennings Dec 17, 2020
Open Source Security

Discover the top 10 open source vulnerabilities in 2020, including Lodash, Jackson-databind, HtmlUnit, and more.

Read More
White Hat Hacking – Not What You Expect -

What You Need To Know About Application Security Testing Orchestration

Tiffany Jennings Dec 10, 2020
Application Security Testing

Discover the importance of Appsec Testing Orchestration in the evolving security threat landscape. Learn how to manage tools effectively.

Read More
White Hat Hacking – Not What You Expect - aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzViZjU0MjhkM2Q3ZTIuanBnJnZlcnNpb249MDAwMCZzaWc9ZjJhODZkNDNjOTNlNDE1YmU0NDNiZjYzYjE5MjkyOGI

Apache Struts Vulnerabilities Pose ‘Stay or Go’ Question

Tiffany Jennings Nov 22, 2020
Open Source Security

Stay informed about the latest Apache Struts vulnerabilities and the ongoing debate of whether to continue using the framework or migrate off it.

Read More
White Hat Hacking – Not What You Expect - merge confidence blog

Get to know Mend Merge Confidence Feature

Tiffany Jennings Nov 16, 2020
Dependency Updates

Introducing Mend Merge Confidence, a feature to save time and reduce risk in updating dependencies. Learn how it works and more.

Read More
White Hat Hacking – Not What You Expect - aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzVkY2Q0OWViYzNjYmYucG5nJnZlcnNpb249MDAwMCZzaWc9NzRjMDIzMjE1OGYzZWY2ZjA2YWM5YjA5YzliZDZjZmI

What Is CVSS v3.1? Understanding The New CVSS

Tiffany Jennings Nov 14, 2020
Open Source Security

Learn about the Common Vulnerability Scoring System (CVSS) v3.1 & how it measures severity, not risk, in assessing security vulnerabilities.

Read More
White Hat Hacking – Not What You Expect -

White Box Testing Guide

Tiffany Jennings Nov 12, 2020
Application Security Testing

Learn about White Box Testing in software development with this comprehensive guide. Understand the types, techniques, tools, advantages.

Read More
White Hat Hacking – Not What You Expect - aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzVmOTljM2JhYTI3ZjMucG5nJnZlcnNpb249MDAwMCZzaWc9MzVkYWU4MjE4YjIyNmJkNzI5OGJjMGFjYmY2ZTQzOTg

SCA vs SBOM: Getting Started With Software Composition Analysis

Tiffany Jennings Oct 29, 2020
Open Source Licenses

Top tips for starting with a software composition analysis solution. Build a team, set goals beyond scanning, understand the data model, make policies work, start small.

Read More
White Hat Hacking – Not What You Expect - Top Open Source Licenses

Open Source Copyleft Licenses: All You Need to Know

Tiffany Jennings Oct 24, 2020
Open Source Licenses

All you need to know about Open Source Copyleft Licenses. Learn about the history, benefits, and considerations of using copyleft licenses.

Read More
White Hat Hacking – Not What You Expect - Vulnerability Prioritization Image blog

Be Wise — Prioritize: Software Security Vulnerability Prioritization

Tiffany Jennings Oct 15, 2020
Open Source Security

Learn how to prioritize software security vulnerabilities effectively to ensure your team is addressing the most urgent threats first.

Read More
White Hat Hacking – Not What You Expect -

Eclipse SW360: Main Features

Tiffany Jennings Oct 8, 2020
DevSecOps

Learn about the main features of Eclipse SW360, an open source tool to manage software components.

Read More
White Hat Hacking – Not What You Expect - aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzVmNzVhNzRmOTY0ZjgucG5nJnZlcnNpb249MDAwMCZzaWc9OTAzNDg3OTgyMzNiNzkzYTBmMzNmMDA5ZDcwZmUwY2Q

Why Manually Tracking Open Source Components Is Futile

Tiffany Jennings Oct 1, 2020
Open Source Licenses

Learn why manually tracking open source components is futile and how automation through software composition analysis can help manage licenses.

Read More
White Hat Hacking – Not What You Expect - aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzVmNmM2YTg2YjQ0NDMucG5nJnZlcnNpb249MDAwMCZzaWc9ZDAwMjkwYmY5ZWRiMGZiZmM3OGFjMGZiZjJlNDUwOGM

Black Box Testing: What You Need to Know

Tiffany Jennings Sep 24, 2020
Application Security Testing

Learn all about black box testing in application security & quality assurance. Discover techniques, & tools and more.

Read More
Previous
1 ... 10 11 12 13 14 15 16 ... 21
Next

Subscribe to our Newsletter

Join our subscriber list to get the latest news and updates

Thanks for signing up! 

© 2026 Mend.io (White Source Ltd.) All rights reserved.