Mend.io Blog

Learn about the latest version of CVSS 4.0. Understand the new metrics and how to use them in your org's vulnerability remediation strategy.

Learn how to make the most out of Static Application Security Testing (SAST) without overwhelming developers.

Discover the power of idempotency in microservices architecture. Learn how to maintain data consistency and predictability.

Learn about the existing security threats that AI and LLMs amplify and how to protect against them.

Discover the top tools for automating SBOMs on our blog. Learn how to create SBOMs effortlessly and boost your supply chain security.

Learn how to manage secrets in Kubernetes with best practices & tools. Secure your apps & data with Kubernetes Secrets & External Secrets.

Discover Mend's Handy Guide to Using EPSS Scores. Learn how EPSS can predict exploits and prioritize vulnerability remediation effectively.

Discover the challenges of license compliance and copyright with AI-generated code in software development. Learn about legal risks.

Learn how to strengthen your security posture with holistic approaches to application security and software supply chain security.

Discover six top tips for holistic application security and software supply chain security for long-term success.

Discover effective strategies for handling security team turnover, maintaining tool efficiency, and fostering strong developer relationships.

Learn how to address and prevent Python circular import issues to write cleaner and more maintainable code. Strategies, examples, and more.

Explore the top open source licenses explained in this blog post. Learn about copyleft vs permissive licenses, including GPL, Apache, MIT.

Learn how building relationships between security and development teams can improve application security. Find key tactics for security.

Learn the basics of npm with this comprehensive guide. From installation to package management, and mastering Node Package Manager commands.

Explore the security threats arising from the boom in AI and LLMs, including data privacy, misinformation, and resource exhaustion.