Ensuring that our software (or applications) is secure has become essential for organizations, mainly since we use more complex applications in various industries. However, a big challenge arises with the creation of security silos.

Software Composition Analysis (SCA) is a fundamental component of application security, aiming to identify vulnerabilities within third-party libraries and dependencies. However, while SCA tools have come a long way, they are not always accurate enough on their own.

Learn about the WebP/libwebp library 0-day vulnerability in 2 minutes

Today, we’re announcing our Github SCM integration for SAST and SCA, which will help organizations to find custom code vulnerabilities (SAST) and vulnerable packages (SCA) in their applications during the development phase. These additions to the Oxeye Application Security Platform complement our runtime-fueled AppSec engine to deliver security across the entire software development lifecycle (SDLC), and to automatically prioritize your remediation efforts. 

Application Security Posture Management (ASPM) is your ultimate watchtower in this fast-paced digital world. This article will take you through the critical components of ASPM, from asset and vulnerability management to risk mitigation and assessment and beyond.

Oxeye is an AppSec platform that detects code vulnerabilities and issues in open source and third party packages. But how do we ensure that the tool that detects these vulnerabilities is itself not vulnerable?