The video version covers the same pipeline if you prefer to watch it: A familiar failure goes like this. A team runs a dependency scanner in CI for months. It reports hundreds of findings, none of them fail a build,…
The last 90 days brought real movement. Qualys announced TruRisk Eliminate 2.0 on October 14. Rapid7 launched Rapid7 Intelligence on October 2. Greenbone put agent-based scanning into technology preview on October 23. Tenable’s documentation now points at the Nessus 10.12.x line, last refreshed October 22, and Intruder published…
Modern software projects depend on a growing number of frameworks, libraries, APIs, cloud services, and third-party integrations. An engineering team might maintain several applications using different technology stacks. One project may use React and Node.js, another Python and FastAPI,…
Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST means the tool reads code without running it. Organizations can use it freely,…
Static/dynamic analysis, dependency health, and secure coding patterns.
An article joins this feed when it matches these terms. Each one is also a search of its own.