Guides
Protect AI models, data, and systems
Test for behavioral risks in conversational AI
Mitigating risks and future trends
AppSec types, tools, and best practices
Automating dependency updates
Manage open source code
Keep source code safe
Improve transparency, security, and compliance
Pre-production scanning and runtime protection
Secure containerized applications
SCA Security: How to Make a Strong Business Case for Software Composition Analysis
Learn why software composition analysis is crucial in combating open source vulnerabilities and how to make a compelling case for buying SCA.
Everything You Need to Know About Application Security Best Practices
Learn the top 10 application security best practices to protect your software from vulnerabilities and attacks. Ensure your apps are secure.
What Are The Key Considerations for Vulnerability Prioritization?
Learn how to prioritize vulnerabilities in your code with key considerations such as severity, exploitability, reachability, and more.
How to Maximize the Value from Your SAST Tool
Learn how to maximize the value from your SAST tool with tactics to optimize security, measure new findings, address backlogs, and more.
Introducing the Mend Open Source Risk Report
Discover the latest insights on open source risk management in the Mend Open Source Risk Report.
The Risks and Benefits of Updating Dependencies
Updating software dependencies is vital to software and application security, but there are challenges. Learn the risks associated with updating dependencies, why they occur, and how you can address them.
Mend SCA Action within Amazon CodeCatalyst Brings Additional Application Security to Developers
Learn about Mend SCA integration within Amazon CodeCatalyst for enhanced application security. Simplifying AWS vulnerability detection.
Modern AppSec Programs Run on Automation
Learn how modern Application Security Programs leverage automation to combat cyber threats, improve efficiency, and reduce costs.
Top Three User Priorities for Software Composition Analysis
Discover the top three user priorities for Software Composition Analysis including application security, DevSecOps, and license compliance.
Advisory: New OpenSSL Critical Security Vulnerability
Learn about the new OpenSSL critical security vulnerabilities CVE-2022-3786 and CVE-2022-3602. Discover their impact, and protect your systems.
A Rash of Recent CVEs in Go
Discover the recent CVEs affecting Go programming language and their impact on popular applications like Docker and Kubernetes.
Six Golden Rules for Software and Application Security
Learn the six golden rules for software and application security.. Stay safe during Cybersecurity Awareness Month 2022!
Three Big Myths About Application Testing With SAST Tools
Discover the truth about Application Testing with SAST. Learn about common myths, integration, and reducing false positives for security.
A Brief Guide to Cloud-Native Applications, Technology, and Security
A comprehensive guide to cloud-native applications, technology, and security. Learn about containers, microservices, CI/CD, and more.
Six Steps to Achieve Zero Trust in Application Security
Discover six key steps to achieve zero trust in application security. Learn how to protect your organization from cyberattacks.
Single Author Uploaded 168 Packages to npm as Part of a Massive Dependency Confusion Attack
Discover how a single author uploaded 168 malicious npm packages in a dependency confusion attack. Learn how Mend blocked these threats.