• Platform
    3 new github features to reinforce your code, repo, and dependency security - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    3 new github features to reinforce your code, repo, and dependency security - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    3 new github features to reinforce your code, repo, and dependency security - ai
    Mend AI Secure AI powered applications
    3 new github features to reinforce your code, repo, and dependency security - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    3 new github features to reinforce your code, repo, and dependency security - dast icon 1 DAST 3 new github features to reinforce your code, repo, and dependency security - apis icon 1 API security 3 new github features to reinforce your code, repo, and dependency security - eol icon EOL support
    Platform Benefits
    3 new github features to reinforce your code, repo, and dependency security - repoi icon Repo integration Scalability-icon Scalability 3 new github features to reinforce your code, repo, and dependency security - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    3 new github features to reinforce your code, repo, and dependency security - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    3 new github features to reinforce your code, repo, and dependency security - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    3 new github features to reinforce your code, repo, and dependency security - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    3 new github features to reinforce your code, repo, and dependency security - red teaming guide featured image
    AI Red Teaming Practical Guide
    3 new github features to reinforce your code, repo, and dependency security - featured image
    A CISO’s Guide to Securing AI from the Start
    3 new github features to reinforce your code, repo, and dependency security - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
    3 new github features to reinforce your code, repo, and dependency security - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo

Mend.io Blog

You can’t rely on open source for security — not even when ai is involved
Jeff Martin Feb 6, 2026

You can’t rely on open source for security — not even when AI is involved

LATEST
Learn more

Filter & Search

3 new github features to reinforce your code, repo, and dependency security - 3 new github features to boost your security 1 1

3 New GitHub Features to Reinforce Your Code, Repo, and Dependency Security

Guy Bar-Gil Jun 16, 2022
Dependency Updates

Learn about the latest GitHub features to enhance your code security and dependency management. Stay ahead of vulnerabilities.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - cloud architecture security

Cloud Security Architecture: A Practical Guide

Tiffany Jennings Jun 9, 2022
Container Security

Learn about Cloud Security Architecture. Understand the importance, core principles, and threats to secure your cloud environment effectively.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - integration of diffend via artifactory plugin

Introducing Mend Supply Chain Defender Integration with JFrog Artifactory

Tiffany Jennings Jun 3, 2022
Software Supply Chain

Discover how Mend Supply Chain Defender integrates with JFrog Artifactory to block malicious software threats in your code base.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - brand announce navy 1920 1080 scaled 1

From WhiteSource to Mend—A Rebrand Journey

Tiffany Jennings May 26, 2022

From WhiteSource to Mend—A Rebrand Journey. Follow our evolution from open source to all code application security.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - brand announce navy 1920 1080 scaled 1

WhiteSource is Now Mend: You Code, We Cure

Rami Sass May 25, 2022
Application Security

Mend, formerly WhiteSource, focuses on automating application security with a remediation-first approach for open source and custom code.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - vulnerability remediation a practical guide

Vulnerability Remediation: A Practical Guide

Tiffany Jennings May 17, 2022
Application Security

Practical guide to vulnerability remediation for developers & security teams. Learn how to detect, prioritize, fix, & monitor vulnerabilities.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - blog

New Typosquatting Attack on npm Package ’colors’ Using Cross language Technique Explained

Maria Korlotian, Tamir Ben Ari May 12, 2022
Malicious Packages

Discover the latest typosquatting attack on the npm package 'colors' using a cross-language technique.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - rubygems critical cve 2022 29176

Impact Analysis: RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover 

Maciej Mensfeld May 10, 2022
Malicious Packages

Impact Analysis of RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover. Learn about the vulnerability, impact assessment, and more

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - what is the nist supply chain risk management program

What is the NIST Supply Chain Risk Management Program?

Tiffany Jennings May 9, 2022
Open Source Security

Discover the NIST Supply Chain Risk Management Program.. Learn how to manage cybersecurity risks in digital supply chains effectively.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - blog why vulnerability management must go beyond cvss to priority scoring

Why Vulnerability Management Must Go Beyond CVSS to Priority Scoring

Tiffany Jennings May 4, 2022
Open Source Security

Learn why vulnerability management must go beyond CVSS to priority scoring for better open source security and remediation prioritization.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - news aws target

AWS Targeted by a Package Backfill Attack

Tamir Ben Ari May 1, 2022
Application Security

Discover how AWS was targeted by a malicious package backfill attack, the methods used by attackers, and how to protect against such attacks.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - blog image 2 assessment tools

5 Vulnerability Assessment Scanning Tools: 5 Solutions Compared

Tiffany Jennings Apr 28, 2022
Application Security

Discover the top 5 vulnerability assessment scanning tools and learn how to prioritize and remediate vulnerabilities to secure your org.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - spring4shell best practices

Get the Response to Spring4Shell Right: Best Practices for Immediate Remediation

Tiffany Jennings Apr 5, 2022
Open Source Security

Learn best practices for immediate remediation of the Spring4Shell vulnerability, including detection, and prioritization.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - spring4shell fdt blog

Spring4Shell: What to Expect and How to Prepare

Rhys Arkins Apr 5, 2022
Developer

Learn about the Spring4Shell vulnerability (CVE-2022-22965), its potential impact, and how to prepare your Java applications.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security - automated software supply chain attacks

Automated Software Supply Chain Attacks: Should You be Worried?

Tamir Ben Ari Apr 1, 2022
Software Supply Chain

Learn why automated software supply chain attacks are a growing threat. Discover how to protecting your org from malicious NPM packages.

Read More Read More
3 new github features to reinforce your code, repo, and dependency security -

Spring4Shell Zero-Day Vulnerability: Information and Remediation for CVE-2022-22965

Tiffany Jennings Mar 31, 2022
Open Source Security

Learn about the Spring4Shell Zero-Day Vulnerability CVE-2022-22965 with information, updates, mitigation guidance, and more.

Read More Read More
Previous
1 ... 15 16 17 18 19 20 21 ... 35
Next

Subscribe to our Blog

Never miss a post. Opt-out at any time.

Thank you

You’re all set to receive our latest posts.

© 2026 Mend.io (White Source Ltd.) All rights reserved.

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report