Mend.io Guides

AI Security Guide: Protecting models, data, and systems from emerging threats

AI Security Guide: Protecting models, data, and systems from emerging threats
Author: Tiffany Jennings | Date: Jun 19, 2025
AI Models Risk
Learn how to protect AI systems with practical strategies and security frameworks.
Read more

Why AI Red Teaming Is the Next Must-Have in Enterprise Security

Why AI Red Teaming Is the Next Must-Have in Enterprise Security
Author: Tiffany Jennings | Date: May 27, 2025
AI Red Teaming
Learn why red teaming is key to securing today’s enterprise AI systems.
Read more

LLM Security: Risks, Mitigations & What’s Next

LLM Security: Risks, Mitigations & What’s Next
Author: Tiffany Jennings | Date: Oct 6, 2025
AI Models Risk
Explore top LLM security risks and mitigation strategies.
Read more

Shining a Light on Shadow AI: What It Is and How to Find It

Shining a Light on Shadow AI: What It Is and How to Find It
Author: Bar-El Tayouri | Date: Aug 29, 2024
AI Models Risk
Find out more about shadow AI and the risks of leaving it uncovered.
Read more

AI Governance Best Practices: 6 controls to extend from AppSec

AI Governance Best Practices: 6 controls to extend from AppSec
Author: Aurora Starita | Date: Mar 7, 2025
Compliance
Six AI governance best practices that build on your AppSec controls.
Read more

What Is Application Security? Types, Tools and Best Practices

What Is Application Security? Types, Tools and Best Practices
Authors: Aurora Starita, Tiffany Jennings | Date: Sep 12, 2024
Application Security
Explore our application security complete guide and find key trends, testing methods, best practices, and tools to safeguard your software.
Read more

Application Security Testing: Security Scanning and Runtime Protection Tools

Application Security Testing: Security Scanning and Runtime Protection Tools
Author: Tiffany Jennings | Date: May 20, 2025
Application Security Testing
Learn about the differences between security scanning and runtime protection in application security testing. Explore tools and tech.
Read more

What Is SAST – Static Application Security Testing

What Is SAST – Static Application Security Testing
Author: Aurora Starita | Date: Apr 16, 2026
SAST
Learn about Static Application Security Testing (SAST).
Read more

What is Software Composition Analysis (SCA)?

What is Software Composition Analysis (SCA)?
Author: Tiffany Jennings | Date: Jul 8, 2025
Software Composition Analysis
Learn about Software Composition Analysis (SCA) and how it helps manage open source code to reduce security risks.
Read more

Building Strong Container Security for Modern Applications

Building Strong Container Security for Modern Applications
Author: Tiffany Jennings | Date: Oct 16, 2025
Container & Cloud Security
Discover how to protect containerized applications.
Read more

API Security in a Digitally Transformed World

API Security in a Digitally Transformed World
Author: Tiffany Jennings | Date: Jan 21, 2021
Container & Cloud Security
Learn about API security. Understand the importance of securing APIs and the best practices to protect your organization.
Read more

What Are OWASP Top 10 Threats & When Will the Top 10 Be Updated?

What Are OWASP Top 10 Threats & When Will the Top 10 Be Updated?
Author: Tiffany Jennings | Date: May 29, 2025
Open Source Security
Stay updated on the latest in application security with the OWASP Top 10 vulnerabilities.
Read more

Vulnerability Management — What You Need To Know

Vulnerability Management — What You Need To Know
Author: Tiffany Jennings | Date: Dec 2, 2021
Application Security
Understand the four stages, metrics, policy setup, and prioritization for effective security through Vulnerability Management.
Read more

Software Supply Chain Security: The Basics and Four Critical Best Practices

Software Supply Chain Security: The Basics and Four Critical Best Practices
Author: Aurora Starita | Date: Sep 14, 2023
Software Supply Chain
Learn about software supply chain security basics and best practices to prevent attacks.
Read more

What is an SBOM? The Complete Guide to Software Bill of Materials

What is an SBOM? The Complete Guide to Software Bill of Materials
Author: Tiffany Jennings | Date: Aug 4, 2025
SBOM
Learn how SBOMs improve transparency, security, and compliance.
Read more

Dependency Management: Protecting Your Code

Dependency Management: Protecting Your Code
Author: Aurora Starita | Date: Jul 12, 2024
Dependency Updates
Learn how to protect your application’s code with dependency management.
Read more

Top Open Source Licenses Explained

Top Open Source Licenses Explained
Author: Tiffany Jennings | Date: Oct 9, 2025
Open Source Licenses
Explore the top open source licenses. Learn about copyleft vs permissive licenses.
Read more

What You Should Know About Open Source License Compliance

What You Should Know About Open Source License Compliance
Author: Sam Quakenbush | Date: May 18, 2023
Open Source Licenses
Learn about open source license compliance for M&A activity, the risks of copyleft licenses like GPL, and how to ensure compliance with SCA.
Read more

When’s the Right Time for an Open Source Audit?

When’s the Right Time for an Open Source Audit?
Author: Tiffany Jennings | Date: Jul 2, 2020
Open Source Security
Learn about the importance of open source audits to gain visibility, compliance, and security. Understand when and why you need an audit.
Read more

Comprehensive Guide to DevSecOps: Principles, Process, and Technology

Comprehensive Guide to DevSecOps: Principles, Process, and Technology
Author: Tiffany Jennings | Date: Jan 29, 2026
DevSecOps
Build secure software, faster. A complete guide to DevSecOps in practice.
Read more

Secure Coding: A Practical Guide

Secure Coding: A Practical Guide
Author: Tiffany Jennings | Date: Jun 13, 2020
Developer
Learn about the importance of secure coding in software development. Discover practical tips and principles to ensure your code is secure.
Read more

Modern AppSec Moves Beyond Shift Left to Shift Smart

Modern AppSec Moves Beyond Shift Left to Shift Smart
Author: Carol Hildebrand | Date: Oct 27, 2022
DevSecOps
Discover how modern AppSec is moving beyond just shifting left to shifting smart. Learn key principles for securing applications.
Read more

Infrastructure as Code: How It Works & Top Tools in 2025

Infrastructure as Code: How It Works & Top Tools in 2025
Author: Tiffany Jennings | Date: Oct 29, 2024
DevSecOps
Learn about Infrastructure as Code (IaC) best practices, benefits, and tools.
Read more