Secure how AI behaves, not just what it’s built from.
Cut through the noise to reduce real application risk.
Automated dependency updates, running on millions of repos.
Extend Mend AppSec to running apps, APIs, and aging dependencies.
SCA vs SBOM: Getting Started With Software Composition Analysis
Top tips for starting with a software composition analysis solution. Build a team, set goals beyond scanning, understand the data model, make policies work, start small.
Open Source Copyleft Licenses: All You Need to Know
All you need to know about Open Source Copyleft Licenses. Learn about the history, benefits, and considerations of using copyleft licenses.
Be Wise — Prioritize: Software Security Vulnerability Prioritization
Learn how to prioritize software security vulnerabilities effectively to ensure your team is addressing the most urgent threats first.
Eclipse SW360: Main Features
Learn about the main features of Eclipse SW360, an open source tool to manage software components.
Top 10 Common Development and Distribution License Questions Answered
Get answers to the top 10 Common Development and Distribution License questions. Learn about CDDL terms, compatibility, and more.
Using Go Modules for Golang Dependency Management
Learn how to use Go Modules for efficient Golang dependency management. Simplify package management, updating, and removal in your Go apps.
Why Manually Tracking Open Source Components Is Futile
Learn why manually tracking open source components is futile and how automation through software composition analysis can help manage licenses.
Black Box Testing: What You Need to Know
Learn all about black box testing in application security & quality assurance. Discover techniques, & tools and more.
Top 9 Code Review Tools for Clean and Secure Source Code
Discover the top 9 code review tools for clean and secure source code, essential for detecting errors and defects before production.
Open Source Vulnerability Databases
Discover the top open source vulnerability databases beyond NVD. Learn how to track and remediate vulnerabilities in your software.
How To Reinstall NPM and Node.js On Your System
Learn how to reinstall NPM and Node.js on Windows, macOS, and Linux to avoid performance issues. Follow step-by-step guides.
Top 10 Microsoft Public License (Ms-PL) Questions Answered
Discover the top 10 Microsoft Public License (Ms-PL) questions answered on this blog. Learn about terms, copyleft, compatibility, and more.
NPM Audit: How to Enforce Your Code Security
Learn how to enforce code security with NPM Audit. Scan your project for vulnerabilities, fix issues, and safeguard your code quality.
License Compatibility: Combining Open Source Licenses
Learn about open source license compatibility and the importance of combining licenses. Understand permissive vs. copyleft licenses and more.
Why You Need an Open Source Vulnerability Scanner
Learn why you need an open source vulnerability scanner to protect your applications from cyber attacks.
The SaaS Loophole in GPL Open Source Licenses
Discover the SaaS loophole in GPL open source licenses and how it affects software distribution. Learn about the AGPL solution.
Never miss a post. Opt-out at any time.
You’re all set to receive our latest posts.
