Tiffany Jennings Head of Content

Learn why your DevOps platform needs a security partner to safeguard your software. Mend.io provides application security and DevSecOps.

Get to know all about DevSecOps and the main tools and practices that organizations should adopt in order to implement a DevSecOps pipeline.

Discover the top three user priorities for Software Composition Analysis including application security, DevSecOps, and license compliance.

Discover the recent CVEs affecting Go programming language and their impact on popular applications like Docker and Kubernetes.

Discover how vulnerability research works at Mend, a focus on open source vulnerabilities and different methods to protect against threats.

Learn the six golden rules for software and application security.. Stay safe during Cybersecurity Awareness Month 2022!

Learn how Mend API simplifies the creation of SBOMs for better supply chain security. Stay ahead in DevSecOps with our automated tool.

Discover the truth about Application Testing with SAST. Learn about common myths, integration, and reducing false positives for security.

A comprehensive guide to cloud-native applications, technology, and security. Learn about containers, microservices, CI/CD, and more.

Learn about the 3 critical best practices of software supply chain security to protect your organization from malicious packages.

Learn about Cloud Security Architecture. Understand the importance, core principles, and threats to secure your cloud environment effectively.

Discover how Mend Supply Chain Defender integrates with JFrog Artifactory to block malicious software threats in your code base.

From WhiteSource to Mend—A Rebrand Journey. Follow our evolution from open source to all code application security.

Practical guide to vulnerability remediation for developers & security teams. Learn how to detect, prioritize, fix, & monitor vulnerabilities.

Discover the NIST Supply Chain Risk Management Program.. Learn how to manage cybersecurity risks in digital supply chains effectively.

Learn why vulnerability management must go beyond CVSS to priority scoring for better open source security and remediation prioritization.