Mend.io Blog

Discover the importance of Appsec Testing Orchestration in the evolving security threat landscape. Learn how to manage tools effectively.

Learn the differences between Docker images and containers. Understand how Docker revolutionizes containerization technology.

Stay informed about the latest Apache Struts vulnerabilities and the ongoing debate of whether to continue using the framework or migrate off it.

Introducing Mend Merge Confidence, a feature to save time and reduce risk in updating dependencies. Learn how it works and more.

Learn about the Common Vulnerability Scoring System (CVSS) v3.1 & how it measures severity, not risk, in assessing security vulnerabilities.

Learn about White Box Testing in software development with this comprehensive guide. Understand the types, techniques, tools, advantages.

Get answers to the top 8 BSD License questions in this blog. Learn about the terms, compatibility with GPL, copyleft status, and more.

Top tips for starting with a software composition analysis solution. Build a team, set goals beyond scanning, understand the data model, make policies work, start small.

All you need to know about Open Source Copyleft Licenses. Learn about the history, benefits, and considerations of using copyleft licenses.

Learn how to expose ports in Docker with different networking rules. Understand the differences between EXPOSE, --expose, -P, and -p flags.

Learn how to prioritize software security vulnerabilities effectively to ensure your team is addressing the most urgent threats first.

Learn about the main features of Eclipse SW360, an open source tool to manage software components.

Get answers to the top 10 Common Development and Distribution License questions. Learn about CDDL terms, compatibility, and more.

Learn how to use Go Modules for efficient Golang dependency management. Simplify package management, updating, and removal in your Go apps.

Learn why manually tracking open source components is futile and how automation through software composition analysis can help manage licenses.

Learn all about black box testing in application security & quality assurance. Discover techniques, & tools and more.