Mend.io Blog

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications

Mend.io + Wiz: A New Code-to-Cloud Integration for Accurate, Context-Driven Risk Prioritization

Shai-Hulud: The Second Coming

AppSec metrics fail, Mend.io’s Risk Reduction Dashboard fixes it

Why AI Red Teaming is different from traditional security

Building a more secure npm ecosystem with Mend Renovate

Ultimate Guide to Open Source Security: Risks, Attacks & Defenses

Mend.io Expands AI Native AppSec to Windsurf, CoPilot, Claude Code, and Amazon Q Developer

Building Strong Container Security for Modern Applications

Code Scanning: Why, How & the Role of Scanning in AI Security

Top Open Source Licenses Explained

We Knew Registry Scanning Wasn’t Enough. So We Built What Comes Next.

Mend.io is Recognized in the 2025 Gartner®Magic Quadrant™ for Application Security Testing

LLM Security: Risks, Mitigations & What’s Next

Top 7 SAST tools for DevSecOps Teams in 2025

42 DevOps Statistics to Know in 2025