Ronen Slavin
Co-Founder & CTO
Ronen Slavin is the Co-Founder and Chief Technology Officer (CTO) at Cycode, a company specializing in Application Security Posture Management (ASPM). With extensive expertise in cybersecurity, he leads Cycode's technical vision and product development. His work focuses on safeguarding software development processes from code to cloud, ensuring robust security measures across the entire software development lifecycle.
-
September 1, 2026
Introducing Agentic Code Scanning: The Holistic Cycode System Around Any Model
TL;DR: Agentic Code Scanning is the fourth dimension of Cycode's code scanning spectrum, not a separate product bolted on...
-
June 10, 2026
The Token Dilemma: Why AI Security Scales on Architecture, Not Model Pricing
A few weeks ago I wrote about why AI models getting dramatically better at finding vulnerabilities actually makes life harder...
-
June 2, 2026
Cycode integrates with Cloud Control Studio, Bringing Authoritative Application Security Context into Cisco Cloud Control
The questions security leaders are asking are changing. It used to be about finding vulnerabilities and threats and managing human-centric...
-
April 22, 2026
Cleaner Code Isn’t Enough: Why AI Still Can’t Automate Security Judgment
There's a clean version of the AI security story that I keep hearing: models get better, scanners get smarter, vulnerabilities...
-
February 26, 2026
Agentic Appsec Has Arrived
AppSec teams today are more capable than ever. The scanners are powerful. The coverage is broad. The data is rich....
-
February 19, 2026
AI Governance: From Visibility to Enforcement Across the Developer Surface
Developers are adopting AI coding assistants, connecting MCP servers, pulling in AI models and packages, spinning up AI infrastructure, and...
-
February 17, 2026
Securing AI Adoption: Enterprise-Grade Guardrails Against Secret Leaks in AI-Assisted IDEs
AI coding assistants have redrawn the IDE's security boundary. Cycode AI Guardrails enforces controls at the moment secrets would escape—before...
-
November 24, 2025
Shai Hulud 2.0: The Second Coming of the Supply Chain Attack
The State of Product Security in the AI Era Report: 97% of Organizations Are Using AI, But Only 19% Have...
-
September 21, 2025
Shai-Hulud NPM Supply Chain Attack
What happened? The Shai-Hulud npm attack is a sophisticated cyberattack targeting the open-source registry, npm. It involves a self-propagating worm,...
-
September 9, 2025
npm debug / chalk Supply-Chain Attack: The Complete Guide
Multiple popular npm packages (including debug, chalk, and core dependencies like ansi-styles, strip-ansi, supports-color) were published with malicious, browser-side code...
-
March 27, 2025
The Essential Role of Supply Chain Security in ASPM
Threat actors are continuously evolving their tactics to exploit vulnerabilities and gain unauthorized access. That increasingly involves attacks targeting the...
-
December 4, 2024
The EU AI Act: A New Era for AI Governance (and What it Means for You)
The EU AI Act is a landmark regulation aimed at ensuring the safe and ethical development and use of artificial...