Application Security articles

AppSec fundamentals, vulnerability management, secure coding, and testing strategies to help teams build and ship secure software at scale.

Featured image NIST SSDF

NIST SSDF: 4 core practices for secure software development

Stephanie Broyles Oct 6, 2026

Application Security

What the NIST SSDF requires and how to implement its four practice groups.

Featured image Detection scaled The loop did not v2

Detection scaled. The loop did not.

Asaf Saar Sep 10, 2026

Application Security

Findings got cheap. Verified closure did not. That gap is the AppSec problem.

Featured image The EU Cyber Resilience Act

EU CRA explained: requirements, timeline, and compliance

Tiffany Jennings Jul 30, 2026

Application Security

What the EU CRA requires, key deadlines, penalties, and how to comply.

Featured image Move Faster Than AI Driven Risk 1000x650

Move faster than AI-driven risk: Inside Mend.io’s latest AI application security update

Asaf Saar Jul 28, 2026

AI Models Risk

AI agent discovery, runtime guardrails, agentic triage, and zero-day speed.

Featured image AI Security Testing Solutions for Dev Pipelines

Top 13 AI security testing solutions for dev pipelines in 2026

Tiffany Jennings Jul 23, 2026

Application Security Testing

Compare the top AI security testing solutions for dev pipelines.

Inside Autogenerated RubyGems Squats

199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Maciej Mensfeld Jul 22, 2026

Malicious Packages

199 malicious gems, zero working payloads: how Mend.io caught the campaign.

Featured image Checkmarx One

Checkmarx One: 7 features, limitations & alternatives

Tiffany Jennings Jul 16, 2026

SAST

Checkmarx One features, limitations, and the top alternatives to consider.

Runtime Protection

Runtime protection: Threats, technologies, and 5 best practices

Tiffany Jennings Jun 23, 2026

Application Security

What runtime protection is, key threats, and 5 best practices to apply.

Blog best software composition analysis services

Best Software Composition Analysis Services: Top 8 in 2026

Shannon Davis Jun 9, 2026

Software Composition Analysis

Compare the top 8 software composition analysis services of 2026.

Blog cover Top 8 AST providers post

Best Application Security Testing Providers: Top 8 in 2026

Tiffany Jennings May 26, 2026

Application Security Testing

The top 8 application security testing providers to know in 2026.

SAST solutions blog graphic

Best SAST Tools in 2026: Top 10 Solutions Reviewed

Tiffany Jennings Apr 28, 2026

SAST

The best SAST tools of 2026: compared, ranked, and reviewed.

Application Security The Complete Guide blog post 2048x1334.png

Best Application Security Testing Tools: Top 10 Tools in 2026

Tiffany Jennings Apr 24, 2026

Application Security Testing

Learn how AST tools secure software and how to choose the right one.

Blog Zero day Visibility 1000x650

From Panic to Playbook: Modernizing Zero‑Day Response in AppSec

Shannon Davis Apr 21, 2026

Application Security

Learn how AppSec teams build a repeatable zero-day response workflow.

SAST All About Static Application Security Testing post

What Is SAST – Static Application Security Testing

Aurora Starita Apr 16, 2026

SAST

Learn about Static Application Security Testing (SAST).

Blog image SCA tools 1

Best Software Composition Analysis (SCA) Tools: Top Solutions in 2026

Tiffany Jennings Apr 14, 2026

Software Composition Analysis

Learn what SCA tools do and how they help secure your open source dependencies.

Blog PROJECT GLASSWING 1000x650

Anthropic’s Project Glasswing: How Claude Mythos is Changing the Rules for AppSec

Shannon Davis Apr 9, 2026

Application Security

See what AI-powered offense means for your AppSec & AI Security program.

1 2 3 4 … 13