Mend.io Blog

Learn how to boost your supply chain security with Software Bill of Materials (SBOMs) through five expert tips.

Learn about the Apache License. Understand its terms, differences with other licenses, and ensure compliance.

Learn about the new features and improvements in CVSS 4.0, the Common Vulnerability Scoring System. Understand how to use it.

Learn how to boost confidence in your open source security. Automate updates and reduce risks with confidence scores for seamless integration.

Mend.io launches AppSec Risk Assessment Program to help organizations visualize and remediate application security risks.

Learn to protect your applications from malicious packages with our guide. Understand the anatomy of attacks and how to prevent them.

Learn about the GPL License and its compliance requirements. Get answers to the top 10 questions about the GPL License.

Discover what’s driving the adoption of SBOMs and what’s next for them in terms of malicious packages and supply chain security.

Mend.io research discovered a threat actor takeover of the name ‘gemnasium-gitlab-service’, a retired Ruby gem with two million+ downloads.

Discover how Mend.io & Jira Security are revolutionizing DevSecOps, improving application security, & streamlining workflows for dev teams.

Mend.io is recognized as a Visionary in the 2023 Gartner Magic Quadrant for Application Security Testing. Learn about their approach.

Learn about open source license compliance for M&A activity, the risks of copyleft licenses like GPL, and how to ensure compliance with SCA.

Learn about Software Composition Analysis (SCA) and how it helps manage open source code to reduce security risks.

Learn about malicious packages, how they work, and the growing threat they pose to software supply chains.

Discover the importance of Software Bill of Materials (SBOM) and compare the three main formats – SPDX, CycloneDX, and SWID.

RSA 2023 takeaways, including sessions on supply chain security, translating security for the board, & the psychology of DevSecOps.