White House Issues New Guidelines on Software Supply Chain Security – What Are the Challenges and Possible Outcomes?

What’s next with SBOMs?

The White House and the Executive Office of the President have just issued a memorandum for the heads of U.S. government and federal executive departments and agencies for enhancing the security of the software supply chain through secure software development practices. What does it mean for you? Find out more about potential implications, the increasingly important role of SBOMs, and how you can prepare. To learn more, read the blog. >>

SBOM Spotlight Resources

Why Mend has created an API to generate SBOMs

BLOG | Mend API Helps Make SBOMs Simple

REPORT | Importance of SBOMs: Protect the Software Supply Chain

BLOG | 3 Critical Best Practices of Software Supply Chain Security

Generate a Detailed SBOM Within Minutes

Mend.io is Trusted By

 

What customers are saying

One of our most indicative KPIs is the amount of time for us to remediate vulnerabilities and also the amount of time developers spend fixing vulnerabilities in our code base, which has reduced significantly. We’re talking about at least 80% reduction in time.

Andrei Ungureanu

Before moving to Mend, the contribution process included a code validation step prior to the final code transfer. Given the wide amount of languages and ecosystem, the process was manual and quite time consuming, especially with the quick growth of our project portfolio, With Mend, this process is automated, saving significant time for developers.

Maurizio Pillitu

When talking about security, improvement is hard to measure. We haven’t had a security breach yet, and it’s probably because we use products like Mend…I would say it reduced the vulnerabilities in production by about 80 percent. When we have a release or run the script, it automatically picks up the vulnerabilities.

Kieran Whelan

It is hard to assign a value to an incident you prevented from happening. You need to understand and manage your risks. Your company and customers demand it. You cannot put a price on trust, and Mend helps us maintain the trust we have with our customers.

Nick Banta

Shifting left helps us catch so many more vulnerabilities earlier on in the process before they really get ingrained into the code base of the company. What Mend does is help 1ES reach out to every developer at Microsoft to provide them advanced information, early shift left guidance on where the open source in their code base that they’re using might be vulnerable and how to fix it quickly, so they can address it before the attackers get us.

Bryan Sullivan

Mend.io offers an enterprise suite of application security tools designed to help leading organizations build and manage mature AppSec programs, enabling them to stop chasing vulnerabilities and start proactively managing application risk.

;