Mend.io Blog

Learn about the existing security threats that AI and LLMs amplify and how to protect against them.

Discover the top tools for automating SBOMs on our blog. Learn how to create SBOMs effortlessly and boost your supply chain security.

Learn how to manage secrets in Kubernetes with best practices & tools. Secure your apps & data with Kubernetes Secrets & External Secrets.

Discover Mend’s Handy Guide to Using EPSS Scores. Learn how EPSS can predict exploits and prioritize vulnerability remediation effectively.

Discover the challenges of license compliance and copyright with AI-generated code in software development. Learn about legal risks.

Learn how to strengthen your security posture with holistic approaches to application security and software supply chain security.

Discover six top tips for holistic application security and software supply chain security for long-term success.

Discover effective strategies for handling security team turnover, maintaining tool efficiency, and fostering strong developer relationships.

Learn how to address and prevent Python circular import issues to write cleaner and more maintainable code. Strategies, examples, and more.

Explore the top open source licenses. Learn about copyleft vs permissive licenses.

Learn how building relationships between security and development teams can improve application security. Find key tactics for security.

Learn the basics of npm with this comprehensive guide. From installation to package management, and mastering Node Package Manager commands.

Explore the security threats arising from the boom in AI and LLMs, including data privacy, misinformation, and resource exhaustion.

Explore advanced Python import features to enhance your code organization and efficiency. Learn about dynamic imports, resource management.

Discover what developers need to succeed for application security. Learn about shifting left, automation, training, collaboration, and more.

Discover best practices for highly effective AppSec. Learn about dependency management, DevSecOps, and more.