Tag

vulnerability scanning

13 articles

Latest in vulnerability scanning

Best Practices

Why Continuous Vulnerability Management Belongs in Every DevSecOps Strategy

DevSecOps is part of the larger shift-left IT paradigm, which aims to identify and address vulnerabilities before they lead to security incidents. NIST’s guidance on secure software development emphasizes integrating security thro…

Oct 27, 20263 min

All vulnerability scanning Articles

Showing 1–13 of 13

Sep11

Blogs

GitHub Widens the Door on Advanced Security Trials

GitHub raised its self-serve Advanced Security trial cap from 100 to 300 licenses, letting more mid-size Enterprise Cloud orgs test for free.

3 min

Aug04

Blogs

Shift Left Security: 4 Automated Security Gates in GitHub Actions

Learn how to add four automated security gates to GitHub Actions using npm audit, Snyk, Trivy, CodeQL and OWASP ZAP—without an enterprise licence.

3 min

Jun12

Blogs

Shift Left to the Developer’s Machine: Building Local Git Security Gates

Shift left to the developer’s machine. The principle is what matters: Stop secrets before they ship. The tooling is a means to that end.

3 min

Nov26

Blogs

Patch or Perish: The Brutal Truth About Vulnerability Management in 2025

Vulnerability management in 2025 is overwhelmed by escalating CVEs and costly breaches; organizations must shift from slow, manual patching to continuous, risk-based, AI-powered re…

3 min

Sep11

Blogs

What Makes Vulnerability Scanning Effective in Fast-Moving DevSecOps Pipelines Today?

Traditional vulnerability scanning can’t keep pace with CI/CD. Learn how real-time, context-aware scanning reduces noise, speeds fixes, and enables secure DevSecOps at scale.

3 min

May31

Checkmarx Brings Generative AI to SAST and IaC Security Tools

Under an early access program, Checkmarx today made available query builder and guided automation tools that take advantage of OpenAI’s generative artificial intelligence (AI) tech…

3 min

Apr17

Application Performance Management/Monitoring

Mobb Launches Community Edition of Automated Remediation Tool

Mobb today made available a free community edition of a namesake tool that creates fixes to open source vulnerabilities. The fixes are based on the results of code scanning by a st…

3 min

Jan30

Application Performance Management/Monitoring

New Relic Bolsters Observability Platform

New Relic has updated its observability platform to include the ability to better detect and track errors in addition to monitoring vulnerabilities. At the same time, an instance o…

3 min

Dec19

Blogs

Rezilion Updates Open Source MI-X Tool to Better Secure App Development

Rezilion has updated its open source MI-X vulnerability discovery tool to include mitigation and remediation recommendations. In addition, the tool can now produce machine-readable…

3 min

Jul28

Blogs

WhiteSource Tool Automatically Fixes Code Vulnerabilities

WhiteSource today announced that it has developed the first-ever tool that automatically remediates vulnerabilities discovered in custom code. Rami Sass, WhiteSource CEO, said Whit…

3 min

Dec17

Blogs

DevOps Chats: 1-Click Vulnerability Scanning on GCP, With Qualys

Sometimes the best way to accomplish something is to choose a path requiring the least friction, or amount of change. Qualys customers now have that path available to them in bring…

3 min

Nov04

Blogs

Survey Surfaces Uneven Approaches to DevSecOps

A ZeroNorth survey shows implementing DevSecOps is rife with questions for many organizations, with no clear answers There’s general agreement that digital business transformation…

3 min

Latest in vulnerability scanning

Best Practices

Why Continuous Vulnerability Management Belongs in Every DevSecOps Strategy

Oct 27, 20263 min