Learn about agentic coding security and Endor Labs

Reducing FedRAMP Compliance Costs with Endor Labs

Microsoft Defender for Cloud Natively Integrates with Endor Labs

Hugging Face Model Score Curation at Endor Labs

Endor Labs Announces Integrated SAST Offerings

Understanding the Cyber Resilience Act

Start Clean With AI: Select Safer LLM Models with Endor Labs

The U.S. Government Prioritizes Open Source Governance and Security

Understanding the Basics of Large Language Models (LLMs)

Container Layer Analysis: Clarity in Remediation

Endor Labs Achieves 92% Reduction in SCA Alerts

Karl Mattson Joins Endor Labs as Chief Information Security Officer

Highlights from Our 2024 Dependency Management Webinar

Relativity Blocks Risks with Endor Labs

Under the Hood: How Blocking with Confidence Improves DevEx at Relativity

48 most popular open source tools for Python applications, scored

FedRAMP Requirements for Vulnerability Management and Dependency Upgrades

Fix Vulnerabilities Faster with Auto Patching and Endor Patches

Dependency Management Report

Announcing the 2024 Dependency Management Report

Starburst Gets 98.3% Noise Reduction with Endor Labs

Under the Hood: Building a DevSecOps Practice at Starburst

What is CI/CD Security and What Tools Do You Need to Do it?

PWN Request Threat: A Hidden Danger in GitHub Actions

Address Open Source Risks with Endor Labs

Give Devs the Confidence to Fix: Making Remediation Less Painful

Endor Labs Partners with Microsoft to Strengthen Software Supply Chains

Prioritize Open Source Risks with Endor Labs

Discover Open Source Risks with Endor Labs

48 most popular open source tools for npm applications, scored

Benchmarking Endor Labs vs. Snyk’s GitHub Apps

Using Artifact Signing to Establish Provenance for SLSA

Fixed is Better than Found: Upgrades & Remediation with Endor Labs

How to Fix Vulnerabilities Without Breaking Changes

Introducing Upgrades & Remediation: Give Developers the Confidence to Fix

Static SCA vs. Dynamic SCA: Which is Better (and Why It's Neither)

33 Most Popular Open Source Tools for Maven Applications, Scored

Jellyfish Enables Data-Driven AppSec with Endor Labs

Under the Hood: Jellyfish’s Data-Driven Security Program

What's a Security Pipeline? - On-Demand Webinar

Secure Everything Your Code Depends On With Endor Labs

Endor Labs Receives Strategic Investment from Citi Ventures

We made the Inc. Best Workplaces List for 2024!

New CocoaPods CVEs: Swift and Objective-C Supply Chains Are Fragile

Questions to Ask Your Software Composition Analysis Vendor

Backstage and Endor Labs: AppSec in a Dev’s Dream Workspace

Managing Open Source Vulnerabilities for PCI DSS Compliance - On-Demand Webinar

Container Scanning + SCA = Better Together

Endor Labs Named to Rising in Cyber by CISOs and Venture Capital Investors

Evaluating and Scoring OSS Packages

Demystifying Transitive Dependency Vulnerabilities

Surprise! Your GitHub Actions Are Dependencies, Too

OSS Vulnerabilities and the Digital Operational Resilience Act (DORA)

Protect Mobile Apps with Kotlin and Swift SCA

Endor Labs Partners with GuidePoint Security to Secure The Software Supply Chain

Intro to Endor Labs - On-Demand Webinar

OWASP OSS Risk 1: Known Vulnerabilities

Low-Code/No Code Artifact Signing

An Auditor’s Perspective on Addressing OSS Vulnerabilities for PCI DSS v4

Your Git Repo is a Supply Chain Risk

Guide to Implementing Software Supply Chain Security

Improve Kubernetes Security with Signed Artifacts and Admission Controllers

AppSec Goes to Devnexus: Lessons from a Thriving, Modern Java Community

Artifact Signing 101 - On-Demand Webinar

XZ Backdoor: How to Prepare for the Next One

XZ is A Wake Up Call For Software Security: Here's Why

SSDF Compliance and Attestation

You Have a Shadow Pipeline Problem

Remediating Vulnerabilities vs. Maintaining Current Dependencies

Prioritizing SCA Findings with Reachability Analysis - On-Demand Webinar

Signing Your Artifacts For Security, Quality, and Compliance

Detect Malicious Packages Among Your Open Source Dependencies

Tom Gleason Joins Endor Labs as VP of Customer Solutions

Introducing CI/CD Security with Endor Labs

How to Improve SCA in GitHub Advanced Security - Tutorial

How to Ingest and Manage SBOMs - Tutorial

VMware Achieves SBOM Compliance for Over 100 Services with Endor Labs

AI-Supported Environment Debugging for Endor Labs

How to Generate SBOM and VEX - Tutorial

How to Use AI for Open Source Selection - Tutorial

Introducing a Better Way to SCA for Monorepos and Bazel

5 Types of Reachability Analysis (and Which is Right for You)

What’s in a Name? A Look at the Software Identification Ecosystem

What You Need to Know About Apache Struts and CVE-2023-50164

Introducing JavaScript Reachability and Phantom Dependency Detection

MileIQ Securely Reimagines a Decade Old Product with Endor Labs

How CycloneDX VEX Makes Your SBOM Useful

How to Scan and Prioritize Valid Secrets - Tutorial

SBOM Requirements for Medical Devices

CISA and NCSC's Take on Secure AI Development

Open Source Security 101: How to Evaluate Your Open Source Security Posture

Endor Labs is a CRN 2023 Stellar Startup!

How to Prioritize Reachable Open Source Software (OSS) Vulnerabilities - Tutorial

Open Source Security for Python and AI Apps

How To Evaluate Secret Detection Tools

Why SCA Tools Can't Agree if Something is a CVE

5 Federal Software Supply Chain Requirements You Should Be Aware Of

You Found Vulnerabilities in Your Dependencies, Now What?

Dependency Resolution in Python: Beware The Phantom Dependency

Chris Hughes Joins Endor Labs as Chief Security Advisor