Tiffany Jennings Head of Content

Top tips for starting with a software composition analysis solution. Build a team, set goals beyond scanning, understand the data model, make policies work, start small.

All you need to know about Open Source Copyleft Licenses. Learn about the history, benefits, and considerations of using copyleft licenses.

Learn how to prioritize software security vulnerabilities effectively to ensure your team is addressing the most urgent threats first.

Learn about the main features of Eclipse SW360, an open source tool to manage software components.

Learn why manually tracking open source components is futile and how automation through software composition analysis can help manage licenses.

Learn all about black box testing in application security & quality assurance. Discover techniques, & tools and more.

Discover the top 7 questions to ask when evaluating a Software Composition Analysis solution for managing open source components.

Discover the top 9 code review tools for clean and secure source code, essential for detecting errors and defects before production.

Discover the top open source vulnerability databases beyond NVD. Learn how to track and remediate vulnerabilities in your software.

Learn about open source license compatibility and the importance of combining licenses. Understand permissive vs. copyleft licenses and more.

Learn why you need an open source vulnerability scanner to protect your applications from cyber attacks.

Discover the SaaS loophole in GPL open source licenses and how it affects software distribution. Learn about the AGPL solution.

Learn all about open source attribution reports and how they help ensure compliance with open source licenses.

Master vulnerability remediation with our 3-step guide. Find out how to identify, prioritize, and fix vulnerabilities.

Learn all about Interactive Application Security Testing (IAST). Understand how IAST compares to SAST and DAST, its pros and cons.

Learn best practices for open source governance to manage risks, avoid vulnerabilities, and ensure compliance.