Search Results

Docker Sandboxes vulnerability lets AI agents access sensitive files outside their sandbox (CVE-2026-103916)

An AI bill of materials (AIBOM) is a machine-readable inventory of the models, datasets, and AI components in a system. Learn what it contains and which standards apply.

A guide to ADLC security metrics, baselines, and scorecards.

Endor Labs + Google Antigravity: Secure code by default in agentic workflows

Endor Labs AI SAST Finds Two Apache Kafka Zero-Days: Unbounded Memory Allocation from Brokers to Kafka Streams

Coding agents changed how software gets built. Here's how ADLC stages map to SSDF practices, OWASP GenAI risks, and the EU AI Act, and what evidence holds up.

Score your agentic development security across the code agents write and the actions they take, with clear stages, proof artifacts, and progress metrics.

A practical checklist for evaluating ADLC security solutions: coverage for code and coding agents, evidence-backed accuracy, agent-loop workflow fit, and a proof of concept you can score.

Introducing AURI Fix for Open Source

A software factory definition in plain terms: how the workflow runs from request to release, and where AI agents, security, and people fit.

ADLC security best practices for AppSec and platform teams: inventory agents and MCP servers, enforce policy on agent actions, vet packages at install, and secure agent code.

A clear guide to AI-native SDLC terminology, including the difference between Agentic Development Lifecycle and Agent Development Lifecycle.

LiteLLM 1.107.0 Compromised: Python Startup Hooks Steal Cloud, AI, and Proxy Credentials

PHP2Shell: Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

Cursor with Gemini 4 Argon matches Fable 5 at 29% SecPass — tying for the top security score on Cursor — and uniquely solves two tasks no other combo on the leaderboard secures. But it is also the slowest and most expensive recent frontier combo we have tested.

Run Endor Labs AI SAST on your own approved LLM provider.

Endor Labs and Bright Security Partner to Close the Gap Between Discovery and Remediation

Endor Labs + SpaceXSI: Building the security foundation for agentic coding

A compromised release of the nx build package shipped a post-install script that did something the industry had not seen before.

Nine days after GPT-6 Sol, Codex with GPT-6.1 Sol scores 77.7% FuncPass and 34.1% SecPass — within one task of GPT-6 Astra on security, a third faster, and with zero confirmed cheating.

Sandboxes Explained: What Each Type Actually Isolates

Codex with GPT-6 Sol scores 72.1% FuncPass and 25.1% SecPass for $104 on Azure — 78% cheaper than Astra ($468) — with zero confirmed cheating.

Endor Labs was recently featured in the Gartner® report First Take: Claude Code Is Defaulting to Automated Permissions — Update Your Governance Controls, published August 24, 2026. The report examines an important change in how Claude Code handles permissions and the broader governance implications as coding agents take more actions without requiring a developer to approve each one.

Claude Code with Opus 5.5 finishes coding tasks in a median of 2.2 minutes for $116 in total, the fastest run on our board and the cheapest Anthropic run by far, but lands at only 33.5% for secure code.

Engineering a security harness for AI coding agents

The first part of the EU Cyber Resiliency Act comes into effect on September 11th. Are you Ready?

Learn how Endor Labs detects malicious VS Code extensions and poisoned updates and blocks them with Package Firewall before they reach developer workstations.

Threat Center and Package Firewall for VS Code Extensions

Agent fixes got 47% cheaper to generate. Review still costs ten times more.

GPT-6 Astra on Codex - the Biggest Codex Leap to Date

How Endor Labs AI SAST Learns What Matters to Your Organization

From SDLC to ADLC: why application security needs coding agent governance

Learn what a secure Agentic Development Lifecycle (ADLC) means, how it differs from SDLC, and which controls help govern coding agents and their output.

Learn agentic development security best practices to secure AI-generated code, dependencies, tools, and MCP workflows without slowing teams.

Hooks are the control plane for the agentic development lifecycle

The real test of AI-native code analysis: is your security debt shrinking?

FedRAMP 2026 vulnerability rules make reachability a requirement

Customer Zero: Implementing Package Firewall at Endor Labs

How JavaScript Sandboxes Work

GHSA-864f-rcv7-6rh4: Critical Type Confusion Vulnerability in isolated-vm

Why C Has Always Broken Static Analysis

Why Endor Labs AI SAST for C finds what other tools miss

Hacking your life with AI can get you hacked

How AI orchestration platforms ship RCE by design

When you can't upgrade: open source examples of Endor Patches

How Endor Labs AI SAST combines program analysis, agentic reasoning, and deterministic engineering to find and fix the flaws that matter in AI-written code.

CISO's Guide: Build vs Buy AI Code Security

Why NPM Malware Keeps Reaching for Bun | Supply Chain Security

Best in Class, Novel in Method: Opus 5 and the Recall-Then-Diverge Pattern

Endor Labs for Connected Products

Endor Labs for Software & Tech

Endor Labs for Financial Services

SBOM Hub & VEX

Endor Patches

Artifact Signing

AI Model Governance

AI Code Review

Container Security & Reachability

AI Coding Agent Governance: The Security Layer for the Agentic SDLC

Package Firewall

Secrets Detection: Find the Secrets That Are Actually Live

Software Supply Chain Security

AI Code Governance: Secure AI-Generated Code and Govern the Agents That Write It

Agentic Remediation: Remediation at Machine Speed, Grounded in Security Context

Endor Labs Recognized by Gartner® in the 2026 Hype Cycle™ for Application Security

The OpenAI and Hugging Face security incident: why AI agents need deterministic guardrails

Beyond MCP: The New Security Playbook for Coding Agents

OpenAI Codex with GPT-5.6 Sol: competitive, zero cheating, one unique Django fix

Everyone Wins Their Own Benchmark

Sonnet 5 vs Fable 5: reliable versus security-forward, not better versus worse

Claude Sonnet 5 with Cursor: strong reasoning, throttled by the harness

Egnyte Accelerates FedRAMP & Protects Engineering Velocity with Endor Labs

Cyber insurers are pricing based on patching speed

Endor Labs Named in the 2026 Gartner® Hype Cycle™ for Secure Software Engineering

Claude Sonnet 5 with Claude Code: strong on function, average on security, and unusually honest

Endor Labs’ AI SAST Finds CVE-2026-55407: Memory-Amplification DoS in buffa

AI SAST found 192 real vulnerabilities, 2.6x more than Claude Code

Endor Labs is a Visionary in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security

Claude Fable 5, take two: same model, different harness, and a very different result

AppSec was built to find problems. The Mythos era demands you fix them, fast.