Introducing an All-New Cycode: The Only Complete Approach to ASPM
There’s no surprise that in today’s lightning fast paced development environment, speed, and efficiency are non-negotiable…
Hardening SDLC
Introducing Bulk Remediation for Software Composition Analysis (SCA)
Cycode Software Composition Analysis (SCA) now includes bulk remediation. This new feature allows users to efficiently address multiple vulnerabilities across different repositories…
What Is ASPM (Application Security Posture Management)?
Application Security Posture Management (ASPM) is an AppSec platform that continuously assesses…
Pipeline Composition Analysis: Expanding Visibility to Build Better Software Supply Chain Security
Software supply chain attacks have been on the rise over the past several years. We see evidence of this daily with more and more headlines proclaiming SolarWinds-style attacks. In fact, Gartner predicts that by 2025, nearly half of all organizations will have experienced an attack on their software supply chain. In response to this rapid … Read more
5 Steps to Protect Code Integrity in Software Pipelines
Get 5 straightforward steps that any organization can take to harden their pipelines to keep attackers out.
Hardening Your SDLC in Response to Lapsus$ Breaches
Over the last several weeks, Lapsus$ has taken down a who’s who of software development teams: NVIDIA, Samsung, Vodafone, Ubisoft, and Mercado Libre.
How We Discovered Vulnerabilities in CI/CD Pipelines of Popular Open-Source Projects
Cycode discovered critical vulnerabilities in several popular open-source projects, each of which can cause a supply-chain attack through the CI process.
Cycode Workflows: No-Code Automated Alerting & Remediation
Cycode workflows allow users to automate security functions such as alerting, ticketing, and remediation that respond directly to triggered violations or vulnerabilities.
Software Supply Chain Security: Your Attack Surface Is Bigger Than You Think
When most organizations approach software supply chain security, too often they think only about securing the open source or third-party dependencies in their code.
Jenkins Security Best Practices
Jenkins is one of the most well-known tool for creating automation pipelines and integrating them with the rest of your CI/CD tools. It has an active community that has contributed thousands of plugins to extend Jenkins’ core functionality…