Reports

In-depth research and guides from the Endor Labs team — on AI code security, open source risk, software supply chain threats, and what security teams need to know.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

How AI orchestration platforms ship RCE by design

How AI orchestration platforms ship RCE by design

AI SAST: Combining Agents, Program Analysis, and Rules for High-Confidence Code Security

AI SAST: Combining Agents, Program Analysis, and Rules for High-Confidence Code Security

Invisible Threats and the Blind Spots of Security

Invisible Threats and the Blind Spots of Security  

Cracking the Code: Solving the Challenges of C/C++ Software Composition Analysis

Cracking the Code: Solving the Challenges of C/C++ Software Composition Analysis

Endor Labs Policies: Developer-Friendly Security Automation

Endor Labs Policies: Developer-Friendly Security Automation

AI Security Code Review: A Multi-Agent Approach for Detecting Security Design Flaws at Scale

AI Security Code Review: A Multi-Agent Approach for Detecting Security Design Flaws at Scale

Endor Patches whitepaper

Endor Patches Whitepaper

Guide to Implementing Software Supply Chain Security, What to Consider When Designing a Program

Guide to Implementing Software Supply Chain Security

State of Dependency Management 2022

State of Dependency Management 2022

OWASP Top 10 Risks for Open Source

OWASP Top 10 Risks for Open Source

State of Dependency Management 2023

State of Dependency Management 2023

ENDOR LABS PATCHES

Fix Vulnerabilities Without Upgrading

See for yourself why Endor Labs is the fastest growing AppSec company ever.

This is some text inside of a div block.