Endor Labs Blog

540 posts indexed since 2022

Posts YTD
267 ↑ vs 99 last year
Avg Posts/Month
9.0 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20220
4-20220
5-20220
6-20220
7-20224
8-20222
9-20222
10-20222
11-20224
12-20223
1-20236
2-20235
3-20234
4-20231
5-20233
6-20237
7-20235
8-20235
9-20238
10-20234
11-20235
12-20237
1-20247
2-20244
3-20245
4-20246
5-20249
6-20246
7-20249
8-202413
9-202413
10-20245
11-20246
12-20247
1-20257
2-20253
3-20255
4-20258
5-20259
6-20259
7-202515
8-202515
9-20259
10-20255
11-202514
12-20257
1-202610
2-202616
3-202635
4-202637
5-202625
6-202616
7-202647
8-202622
9-202621
10-202638
11-20260
Post Details

540 matching posts

Title Author Published Words HN Pts
Understanding the Basics of Large Language Models (LLMs) George Apostolopoulos 2024-10-08 1,290 --
The U.S. Government Prioritizes Open Source Governance and Security Chris Hughes 2024-10-10 689 --
Start Clean With AI: Select Safer LLM Models with Endor Labs George Apostolopoulos 2024-10-16 1,407 --
Understanding the Cyber Resilience Act Jenn Gile 2024-10-23 2,336 --
Endor Labs Announces Integrated SAST Offerings Amod Gupta 2024-11-05 807 --
Hugging Face Model Score Curation at Endor Labs Rachel Lim 2024-11-11 2,094 --
Microsoft Defender for Cloud Natively Integrates with Endor Labs Jenn Gile 2024-11-19 1,533 --
Reducing FedRAMP Compliance Costs with Endor Labs Darren Meyer 2024-11-22 1,655 --
Breaking Changes, Breaking Trust Joseph Hejderup 2024-11-26 1,708 --
Achieving FedRAMP’s Container Scanning Requirements Jenn Gile 2024-11-27 856 --
Why OVAL Feeds Outperform NVD for Linux Vulnerability Management Henrik Plate 2024-12-03 1,358 --
Reduce FedRAMP Compliance Costs SCA 2024-12-04 457 --
The Uncomfortable Truth of Vulnerable and Outdated Software Components Philip Hamer 2024-12-09 1,958 --
Grip Security Reduces Noise by 99% Jenn Gile 2024-12-11 867 --
Under the Hood: Grip Security Builds Customer Trust with AppSec Idan Fast 2024-12-11 1,764 --
Endor Patches Whitepaper Security 2024-12-16 212 --
Why Reachability Analysis for JavaScript Is Hard (and How We Fixed It) Danny Kim 2024-12-17 1,280 --
How Endor Labs Prioritizes Open Source Security Patches Andrew Stiefel 2025-01-07 870 --
Identifying and Tracking FedRAMP False Positives Jenn Gile 2025-01-14 1,288 --
Uncover Trends and Show AppSec Value with the Endor Labs Dashboard Ron Harnik 2025-01-21 900 --
Everything You Need to Know About Opengrep Varun Badhwar 2025-01-23 678 --
Remote Code Execution Vulnerabilities in Apache Struts Jenn Gile 2025-01-24 1,206 --
How to Discover Open Source AI Models in Your Code Rachel Lim 2025-01-28 1,456 --
DeepSeek R1: What Security Teams Need to Know George Apostolopoulos 2025-01-29 2,382 --
How to Get Developers to Accept Security PRs Faster Andrew Stiefel 2025-02-04 949 --
The AppSec Maturity Staircase: Climbing Faster, Not Harder with Endor Labs Jamie Scott 2025-02-11 1,883 --
How Endor Patches Are Built and Tested Henrik Plate 2025-02-18 1,514 --
Application Security Posture Management (ASPM) Explained Andrew Stiefel 2025-03-11 2,193 --
GitHub Action tj-actions/changed-files supply chain attack: what you need to know Dimitri Stiliadis 2025-03-15 840 --
What You Need to Know About UK Cyber Essentials Certification Rob Osborn 2025-03-18 1,535 --
Blast Radius of the tj-actions/changed-files Supply Chain Attack Henrik Plate 2025-03-19 1,128 --
OWASP OSS Risk 2: Compromise of Legitimate Package Camilla Odlund 2025-03-25 2,519 --
Reducing Noise and Fixing What Matters Andrew Stiefel 2025-04-02 103 --
Critical RCE Vulnerability in Apache Parquet (CVE-2025-30065) – Advisory and Analysis Tom Gleason 2025-04-02 738 2
Meet the application security platform built for the AI era Amod Gupta 2025-04-23 1,432 --
Introducing the Endor Labs MCP Server: fix-first security for the vibe coding era Dimitri Stiliadis 2025-04-23 564 --
AI Security Code Review: A Multi-Agent Approach for Detecting Security Design Flaws at Scale AI/ML 2025-04-23 207 --
Introducing AI Security Code Review Julien Sobrier 2025-04-23 1,416 --
Why We Raised a $93M Series B (In This Market) Varun Badhwar 2025-04-23 690 --
Secure AI-Generated Code at the Source AI/ML 2025-04-23 577 --
Open Source Gets Political: What The easyjson Debate Misses (and what to do about it) Ron Harnik 2025-05-05 831 --
Why Security Policies Frustrate Developers (and How We Can Fix Them) Matt Brown 2025-05-06 701 --
5 Tips for Managing Bazel Dependencies (Without Losing Friends) Alexandre Wilhelm 2025-05-12 1,740 --
Mastering Security Automation: Exception and Remediation Policies Matt Brown 2025-05-15 630 --
CVE-2025-4641 is Critical, But Likely Unreachable Ron Harnik 2025-05-16 596 --
Endor Labs Policies: Developer-Friendly Security Automation Security 2025-05-19 206 --
CVE-2025-47949 Reveals Flaw in samlify That Opens Door to SAML Single Sign-On Bypass Meenakshi S L 2025-05-20 861 --
The UK Software Security Code of Practice through a Software Supply Chain Lens Rob Osborn 2025-05-22 531 --
Benchmarking Opengrep Performance Improvements Julien Sobrier 2025-05-29 1,117 --
AppSec’s Exploitation Era: What Verizon, Mandiant, and Datadog Are Telling Us Chris Hughes 2025-06-04 1,514 --