• Platform
    Infrastructure as code: how it works & top tools in 2025 - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    Infrastructure as code: how it works & top tools in 2025 - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    Infrastructure as code: how it works & top tools in 2025 - ai
    Mend AI Secure AI powered applications
    Infrastructure as code: how it works & top tools in 2025 - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    Infrastructure as code: how it works & top tools in 2025 - dast icon 1 DAST Infrastructure as code: how it works & top tools in 2025 - apis icon 1 API security Infrastructure as code: how it works & top tools in 2025 - eol icon EOL support
    Platform Benefits
    Infrastructure as code: how it works & top tools in 2025 - repoi icon Repo integration Scalability-icon Scalability Infrastructure as code: how it works & top tools in 2025 - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    Infrastructure as code: how it works & top tools in 2025 - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    Infrastructure as code: how it works & top tools in 2025 -
    System prompt hardening Prevent prompt injection and misuse
    Infrastructure as code: how it works & top tools in 2025 - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    Infrastructure as code: how it works & top tools in 2025 - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    Infrastructure as code: how it works & top tools in 2025 - red teaming guide featured image
    AI Red Teaming Practical Guide
    Infrastructure as code: how it works & top tools in 2025 - featured image
    A CISO’s Guide to Securing AI from the Start
    Infrastructure as code: how it works & top tools in 2025 - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
    Infrastructure as code: how it works & top tools in 2025 - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo

Mend.io Blog

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install
Tom Abai Mar 31, 2026

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

LATEST
Learn more

Filter & Search

Infrastructure as code: how it works & top tools in 2025 - iac blog

Infrastructure as Code: How It Works & Top Tools in 2025

Tiffany Jennings Oct 29, 2024
DevSecOps

Learn about Infrastructure as Code (IaC) best practices, benefits, and tools.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - all about rag blog post

All About RAG: What It Is and How to Keep It Secure

Bar-El Tayouri Oct 24, 2024
AI Models Risk

Learn about retrieval-augmented generation, one complex AI system that developers are using.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - understanding software dependency package health post

Vital Signs of Software Dependencies: Understanding Package Health

Sarah Moglia Oct 15, 2024
Dependency Updates

Learn how package health data empowers developers to update safely and efficiently.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - blog its cybersecurity awareness month lets talk appsec

It‘s Cybersecurity Awareness Month-Let‘s Talk AppSec

Chris Lindsey Oct 14, 2024
Application Security

October is Cybersecurity Awareness Month. Learn how to protect your software and reduce risks with AppSec tips.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - cybersecurity awareness month blog post

Cybersecurity Awareness Month: AI Safety for Friends and Family

Sarah Moglia Oct 10, 2024
AI Models Risk

This blog is for your friends and family working outside of the security and technical industries.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - dont treat dast like dessert post

Don’t Treat DAST Like Dessert

Chris Lindsey Oct 8, 2024
Application Security

DAST is an essential part of a nutritious application security diet—not just a once-a-quarter treat.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - power of platform native consolidation in appsec blog

The Power of Platform-Native Consolidation in Application Security

Yaron Avisror Sep 26, 2024
Application Security

Streamline workflows, consolidate data, boost security posture, and empower developers to focus on innovation.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - ai and aws blog 1

What is the KEV Catalog?

Aurora Starita Sep 19, 2024
Application Security

A quick guide to the Known Exploited Vulnerabilities (KEV) catalog.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - application security the complete guide blog post

What Is Application Security? Types, Tools and Best Practices

Aurora Starita, Tiffany Jennings Sep 12, 2024
Application Security

Explore our application security complete guide and find key trends, testing methods, best practices, and tools to safeguard your software.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - introducing the mend appsec platform blog post

Introducing the Mend AppSec Platform

Carol Hildebrand Sep 3, 2024
Application Security

The Mend AppSec platform offers customers everything needed to build proactive application security through one solution, at one price.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - hype cycle aspm overview blog post

ASPM and Modern Application Security

Rami Sass Aug 30, 2024
Application Security

Gartner's 2024 Hype Cycle for Application Security: ASPM moves from peak to trough.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - blog shining a light on shadow ai

Shining a Light on Shadow AI: What It Is and How to Find It

Bar-El Tayouri Aug 29, 2024
AI Models Risk

Find out more about shadow AI and the risks of leaving it uncovered.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - blackhat 2024 blog

Black Hat 2024: AI, AI, and Everything Else

Chris Lindsey Aug 16, 2024
Application Security

Chris Lindsey shares his takeaways from another exciting Black Hat conference

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - wheres my documentation blog

Dude, Where’s My Documentation?

Chris Lindsey Aug 8, 2024
Application Security

When the zero day hits the fan, can you find the information you need?

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - ai and aws blog 1

Next-Gen Vulnerability Assessment: AWS Bedrock Claude in CVE Data Classification

Maciej Mensfeld Jul 30, 2024
AI Models Risk

Explore LLMs in cybersecurity research: analyzing vulnerability data, sifting through CVE information, and enhancing digital safety.

Read More Read More
Infrastructure as code: how it works & top tools in 2025 - a guide to open source software

A Guide to Open Source Software

Aurora Starita Jul 26, 2024
Open Source Licenses

Explore how to use open source software to innovate while minimizing risk.

Read More Read More
Previous
1 ... 5 6 7 8 9 10 11 ... 36
Next

Subscribe to our Blog

Never miss a post. Opt-out at any time.

Thank you

You’re all set to receive our latest posts.

© 2026 Mend.io (White Source Ltd.) All rights reserved.

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report