Blog – WhiteSource
AppSec, DevSecOps, open source license compliance, and audits: we've got you covered
-
Read ArticleTop 7 Questions to Ask When Evaluating a Software Composition Analysis Solution
Software Composition Analysis software helps manage your open source components. Here are 7 questions you should ask before buying an SCA solution.
-
Read ArticleTop 9 Code Review Tools for Clean and Secure Source Code
-
Find & Fix open source vulnerabilities in minutes
Start Free Trial -
Read ArticleWhy Patch Management Is Important and How to Get It Right
-
Read ArticleApplication Security Testing: Security Scanning Vs. Runtime Protection
-
Read ArticleOur Favorite Web Vulnerability Scanners
-
Read ArticleLicense Compatibility: Combining Open Source Licenses
While open source licenses are free, they still come with a set of terms & conditions that users must abide by. Read why license compatibility is a major concern.
-
Read ArticleWhy You Need an Open Source Vulnerability Scanner
An open source vulnerability scanner is a tool that helps organizations identify and fix any risks associated with open source software usage. Learn all about it.
-
Read ArticleEverything You Wanted to Know About Open Source Attribution Reports
-
Read ArticleDoes IAST Fit Into Your AppSec Program?
Interactive application security testing (IAST) works from within an application to detect and report issues while an application is running.
-
Read ArticleDynamic Application Security Testing: DAST Basics
Dynamic application security testing (DAST), or black-box testing, finds vulnerabilities by attacking an application from the outside while it's is running.
-
Read ArticleJuly 2020 Open Source Security Vulnerabilities Snapshot
-
Read ArticleWhen’s the Right Time for an Open Source Audit?
Open Source Audit. Three words which can make a big difference to the continued success of your organization? But when is the right time to start one, and why is it so important anyhow? Find...
-
Read ArticleSoftware Development Life Cycle: Finding a Model That Works
The software development life cycle has are two main models: Waterfall and Agile. This blog identifies the phases of the SDLC and most common models.
-
Read ArticleStatic Application Security Testing: SAST Basics
-
Read ArticleCI/CD and the Promise of Agile Transformation
Learn how CI/CD (continuous integration/continuous delivery) pushes frequent, incremental software updates & fixes regardless of size using automation tools.
-
Read ArticleJune 2020 Open Source Security Vulnerabilities Snapshot
-
Read ArticleForrester's State of Application Security, 2020: Key Takeaways
-
Find & Fix open source vulnerabilities in minutes
Start Free Trial -
Read ArticleDevSecOps vs. SecDevOps: A Rose by Any Other Name?
-
Read ArticleGartner 2020 Magic Quadrant for Application Security Testing: Key Takeaways
-
Read ArticleMay Open Source Security Vulnerabilities Snapshot
-
Loading More...
