Articles

How Does Threat Modeling Fit Into the Fast World of DevSecOps?

Learn more about threat modeling and how to get security benefits without putting gates in front of the software development process. Take threat modeling a step further “left.”

GNU General Public License: GPLv3 explained

Learn everything you need to know about GPL License: new clauses, the difference between GPLv2 and GPLv3, terms and conditions and more.

Is an AGPL License the Right Choice for Your Open Source Projects?

Learn more about AGPL license: advantages, terms and conditions, commercial use, and more. Determine whether the AGPL 3, LGPL 3, or standard GPL 3 will suit your project.

Open Source Licenses: Types and Comparison

Learn more about different types of open source licenses and how they all seek to protect both the authors and users of the software.

Malicious Code Explained

What is malicious code? Learn more about malicious code and how it impacts application users and developers.

What is ASPM? (Application Security Posture Management)

Application security posture management (ASPM) overview - Learn how to strengthen app security using holistic visibility, automation & robust security measures.

How To Measure Application Security: Metrics, Tools & KPIs

How do you know if your application security program is effective? Learn the key metrics to track for your application and tools that can help.

5 DevOps pipeline best practices

Learn more about DevOps pipeline best practices including continuous integration, continuous delivery (CI/CD), automation, and observability.

Application Risk Management

Application risk management is critical but increasingly complex. This guide outlines the steps of application risk management and valuable tools for developers.

Securing Source Code in Repositories is Essential: How To Get Started

Keeping your source code secure helps safeguard it against data breaches, maintains user trust, and helps to prevent potential financial losses or reputational damage; learn why it's important and how to get started.

Top 10 npm power-user commands every JavaScript developer should know

Master essential npm commands to streamline your JavaScript development. Whether it's dependency management or security enhancements, you can boost efficiency and protect your projects. Learn how to leverage npm ls, npm why, npm run, and more to elevate your npm skills today.

Security posture: Assessing & improving security at scale

Learn what security posture is, how to manage it, its role in compliance/supply chain, and how to measure security posture with 4 key metrics.

What is Incident Response? Definition, Steps and Tools

Everything you need to know about incident response including steps for creating an effective incident response plan that mitigates the damage of a cyber attack.

How to secure SaaS applications

Learn how to secure SaaS applications as a vendor and which SaaS security best practices to implement across your organization as a user.

Cybersecurity audit types explained

Learn the different types of security audits, when you should use each of them, and where to integrate audits into existing security pipelines.

Getting Started with Capture the Flag

If you're new to CTFs or looking to sharpen your skills, understanding how they work is key to success. This article breaks down the importance of CTFs in cybersecurity—how they help you develop critical security skills, understand real-world vulnerabilities, and improve your ability to defend systems effectively.

How Snyk uncovers libuv CVE-2024-24806 SSRF vulnerabilities in the Node.js project

Node.js is a powerful and widely used runtime that allows developers to build scalable and high-performance applications using JavaScript. However, many developers might not realize that Node.js relies heavily on several third-party open-source components to function effectively. Key among these components are libuv, OpenSSL, and V8

Decoding CVEs: A practical guide to assessing and mitigating security risks

Let's explore the world of Common Vulnerabilities and Exposures (CVEs) with step-by-step examples of evaluating if a CVE impacts your project and pragmatic strategies for effective mitigation. This guide will empower you to tackle security vulnerabilities head-on. Don't let CVE warnings go unnoticed — learn how to address them confidently and efficiently.

How Snyk Helps with the OWASP Software Assurance Maturity Model

Read how the OWASP Software Assurance Maturity Model (SAMM) and Snyk can work together to provide an effective approach to measuring, managing, and improving your software security. Learn about the key benefits, practical implementation steps, and the specific tools offered by Snyk to support your organization's security journey.

Your Clawdbot (OpenClaw) AI Assistant Has Shell Access and One Prompt Injection Away from Disaster

Is your personal AI assistant secure? Dive into the agentic security risks of Clawdbot: prompt injection, supply chain, and network exposure. Discover Snyk's tools to secure your agents.