• Platform
    Understanding black duck sast: pros/cons and technical architecture - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    Understanding black duck sast: pros/cons and technical architecture - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    Understanding black duck sast: pros/cons and technical architecture - ai
    Mend AI Secure AI powered applications
    Understanding black duck sast: pros/cons and technical architecture - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    Understanding black duck sast: pros/cons and technical architecture - dast icon 1 DAST Understanding black duck sast: pros/cons and technical architecture - apis icon 1 API security Understanding black duck sast: pros/cons and technical architecture - eol icon EOL support
    Platform Benefits
    Understanding black duck sast: pros/cons and technical architecture - repoi icon Repo integration Scalability-icon Scalability Understanding black duck sast: pros/cons and technical architecture - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    Understanding black duck sast: pros/cons and technical architecture - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    Understanding black duck sast: pros/cons and technical architecture -
    System prompt hardening Prevent prompt injection and misuse
    Understanding black duck sast: pros/cons and technical architecture - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    Understanding black duck sast: pros/cons and technical architecture - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    Understanding black duck sast: pros/cons and technical architecture - red teaming guide featured image
    AI Red Teaming Practical Guide
    Understanding black duck sast: pros/cons and technical architecture - featured image
    A CISO’s Guide to Securing AI from the Start
    Understanding black duck sast: pros/cons and technical architecture - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
    Understanding black duck sast: pros/cons and technical architecture - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo

Mend.io Blog

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install
Tom Abai Mar 31, 2026

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

LATEST
Learn more

Filter & Search

Understanding black duck sast: pros/cons and technical architecture - blog blackduck sast

Understanding Black Duck SAST: Pros/Cons and Technical Architecture

Tiffany Jennings Jan 27, 2026
SAST

A detailed review of Black Duck SAST plus a Mend SAST alternative.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog cover ai security maturity checklist

Introducing Mend.io’s AI Security Maturity Survey + Compliance Checklist available today

Tiffany Jennings Jan 20, 2026
AI Models Risk

A new tool to help security teams quantify AI risk and prepare for 2026 regulations.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog best software composition analysis enterprise

Best Software Composition Analysis for Enterprise: Top 8 in 2026

Tiffany Jennings Jan 15, 2026
Software Composition Analysis

Explore this guide to the best software composition analysis tools for large teams.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - llm red teaming blog image

LLM Red Teaming: Threats, Testing Process & Best Practices

Tiffany Jennings Jan 13, 2026
AI Red Teaming

A practical guide to LLM red teaming.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog blackduck sca

Black Duck SCA: Pros/Cons, Architecture, and Quick Tutorial

Tiffany Jennings Jan 8, 2026
Software Composition Analysis

A detailed review of Black Duck SCA plus a Mend SCA alternative.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - automated red teaming

Automated Red Teaming: Capabilities, Pros/Cons, and Latest Trends

Tiffany Jennings Jan 6, 2026
AI Red Teaming

Learn how automated red teaming simulates cyberattacks at scale.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog veracode sast

Understanding Veracode SAST: Pros/Cons, Architecture, and Pricing

Tiffany Jennings Jan 2, 2026
SAST

A detailed review of Veracode SAST plus a Mend SAST alternative.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog veracode sca

Veracode SCA Solution Overview: Features, Limitations, and Tutorial

Tiffany Jennings Dec 30, 2025
Software Composition Analysis

A detailed review of Veracode SCA plus a Mend SCA alternative.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - announcement post azi cohen

Mend Leadership Update: Building on Our Momentum for the Next Phase of Growth

Stephanie Broyles Dec 22, 2025
Application Security

An update on Mend.io's leadership as we enter the next phase of growth.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - servicenow blog featured image

Why AppSec and Network Risk Management Must Be Unified in the Modern Enterprise

Tiffany Jennings Dec 18, 2025
Application Security

See how Mend.io’s ServiceNow integration unifies application, network, and operational risk.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog post npm fake font packages

NPM User Flooding Registry with Fake Font Packages

Tom Abai Dec 16, 2025
Malicious Packages

Analysis of an npm account flooding the registry with malformed font packages.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog mcp security

MCP Security: 10 Key Elements to Secure and Critical Best Practices

Tiffany Jennings Dec 9, 2025
AI Models Risk

Learn what MCP security is, key risks like prompt injection, and best practices.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog critical cve 2025 55182

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications

Tom Abai Dec 4, 2025
Malicious Packages

Discover a critical security flaw that enables remote code execution in React Server Components.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - mend wiz integration graphic

Mend.io + Wiz: A New Code-to-Cloud Integration for Accurate, Context-Driven Risk Prioritization

Tiffany Jennings Dec 2, 2025
Application Security

See how Mend.io and Wiz deliver true code-to-cloud visibility.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog cover top 7 ast providers post 1

Best Application Security Testing Providers: Top 7 in 2025

Tiffany Jennings Dec 1, 2025
Application Security Testing

Discover how AST providers help teams find and fix vulnerabilities.

Read More Read More
Understanding black duck sast: pros/cons and technical architecture - blog zero day shai hulud v2

Shai-Hulud: The Second Coming

Tom Abai Nov 24, 2025
Malicious Packages

See how the latest Shai-Hulud attack works.

Read More Read More
Previous
1 2 3 4 5 ... 36
Next

Subscribe to our Blog

Never miss a post. Opt-out at any time.

Thank you

You’re all set to receive our latest posts.

© 2026 Mend.io (White Source Ltd.) All rights reserved.

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report