Learn

Learn about software supply chain security and Endor Labs.

Featured resources

Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec
Blog

Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec

Jan 23, 2026
How Fake Font Packages Abused npm as a CDN
Blog

How Fake Font Packages Abused npm as a CDN

Jan 23, 2026
Understanding NPM Worms and the Shai-Hulud Attack
Blog

Understanding NPM Worms and the Shai-Hulud Attack

Nov 25, 2025
StackHawk + Endor Labs: Correlating SAST and DAST Alerts
Blog

StackHawk + Endor Labs: Correlating SAST and DAST Alerts

Nov 20, 2025
Topic
Medium
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
SCA
Open Source
How Security and Engineering Can Scale Open Source Security
Video

How Security and Engineering Can Scale Open Source Security - Webinar

Jun 23, 2023
Compliance & SBOM
News
Security
Endor Labs is SOC 2 Type II Certified!
Blog

Endor Labs is SOC 2 Type II Certified!

Jun 15, 2023
Security
SCA
Open Source
Reviewing Malware with LLMs: OpenAI vs. Vertex AI
Blog

Reviewing Malware with LLMs: OpenAI vs. Vertex AI

Jun 5, 2023
News
Endor Labs Wins Intellyx Digital Innovation Award
Blog

Endor Labs Wins Intellyx Digital Innovation Award

May 23, 2023
News
Endor Labs Recognized As a 2023 Bay Area Best Place to Work
Blog

Endor Labs Recognized As a 2023 Bay Area Best Place to Work

May 5, 2023
Security
Developer Productivity
SCA
Make Developers' Lives Easier with Endor Labs & GitHub Advanced Security
Blog

Make Developers' Lives Easier with Endor Labs & GitHub Advanced Security

May 3, 2023
Security
LLM-assisted Malware Review: AI and Humans Join Forces to Combat Malware
Blog

LLM-assisted Malware Review: AI and Humans Join Forces to Combat Malware

Apr 17, 2023
News
Endor Labs Selected as Finalist for RSA Conference 2023 Innovation Sandbox
Blog

Endor Labs Selected as Finalist for RSA Conference 2023 Innovation Sandbox

Mar 22, 2023
News
Endor Labs Announces 100% Channel Commitment, Launches Global Hyperdrive Program to Arm Resellers and Solution Providers with Unprecedented Software Supply Chain Security
Blog

Announcing the Endor Labs Hyperdrive Program for Resellers and Solution Providers

Mar 16, 2023
News
Endor Labs partners with Zinfinity to help enterprise safely adopt Open Source Software
Blog

Endor Labs partners with Zinfinity to help enterprise safely adopt Open Source Software

Mar 6, 2023
SCA
Security
Open Source
OWASP Top 10 Risks for Open Source
Ebook/Report

OWASP Top 10 Risks for Open Source

Mar 1, 2023
Security
Compliance & SBOM
How to quickly measure SBOM accuracy for Maven projects (for free)
Blog

How to Quickly Measure SBOM Accuracy for Maven Projects (for Free)

Feb 28, 2023
Compliance & SBOM
News
Security
Endor Labs is SOC2 Certified!
Blog

Endor Labs is SOC2 Certified!

Feb 9, 2023
SCA
Open Source
Introduction to Open Source Security
Video

Introduction to Open Source Security - Webinar

Feb 3, 2023
SCA
Open Source
Comparing SBOMs Generated at Different Lifecycle Stages
Video

Comparing SBOMs Generated at Different Lifecycle Stages - Webinar

Feb 3, 2023
Security
Compliance & SBOM
SBOM vs. SBOM: Comparing SBOMs from different tools and lifecycle stages
Blog

SBOM vs. SBOM: Comparing SBOMs from Different Tools and Lifecycle Stages

Feb 2, 2023
Developer Productivity
Security
What breaking changes teach us about security
Blog

What Breaking Changes Teach Us about Security

Jan 31, 2023
Compliance & SBOM
Open Source Licensing Simplified: A Comparative Overview of Popular Licenses
Blog

Open Source Licensing Simplified: A Comparative Overview of Popular Licenses

Jan 24, 2023
Security
Compliance & SBOM
What is VEX and why should I care?
Blog

What is VEX and Why Should I Care?

Jan 18, 2023
Security
Open Source
Malware
Whatfuscator, malicious open source packages, and other beasts
Blog

Whatfuscator, Malicious Open Source Packages, and Other Beasts

Jan 9, 2023
Security
Exploring Risk: Understanding Software Supply Chain Attacks
Blog

Exploring Risk: Understanding Software Supply Chain Attacks

Jan 5, 2023

Want to stay in the loop?

Sign up for our newsletter.