Ressources

How Snyk Helps with the OWASP Software Assurance Maturity Model

Read how the OWASP Software Assurance Maturity Model (SAMM) and Snyk can work together to provide an effective approach to measuring, managing, and improving your software security. Learn about the key benefits, practical implementation steps, and the specific tools offered by Snyk to support your organization's security journey.

Unsolved Problems in AppSec

Understanding, Creating & Curating SBOMs

Prioritizing your AppSec Issues

AI Guardrails for AppSec

Snyk in 30: AppSec

Snyk in 30: Supply Chain

Snyk in 30: SAST

Snyk in 30: Platform

Snyk for Financial Services Organizations Cheat Sheet

Découvrez comment sécuriser les logiciels financiers à l’aide d’outils conçus en priorité pour les développeurs.

Getting started with JavaScript static analysis

Static analysis tools are a must-have for JavaScript developers. They automatically scan your code for errors, security vulnerabilities, and formatting issues. This helps you write better code faster and improve your overall development process.

AI Code, Security, and Trust in Modern Development

CICD GitHub Actions Java Tutorial

TCM top 10 Vulns youtube video

Decoding CVEs: A practical guide to assessing and mitigating security risks

Let's explore the world of Common Vulnerabilities and Exposures (CVEs) with step-by-step examples of evaluating if a CVE impacts your project and pragmatic strategies for effective mitigation. This guide will empower you to tackle security vulnerabilities head-on. Don't let CVE warnings go unnoticed — learn how to address them confidently and efficiently.

Top 10 npm power-user commands every JavaScript developer should know

Master essential npm commands to streamline your JavaScript development. Whether it's dependency management or security enhancements, you can boost efficiency and protect your projects. Learn how to leverage npm ls, npm why, npm run, and more to elevate your npm skills today.

How Snyk uncovers libuv CVE-2024-24806 SSRF vulnerabilities in the Node.js project

Node.js is a powerful and widely used runtime that allows developers to build scalable and high-performance applications using JavaScript. However, many developers might not realize that Node.js relies heavily on several third-party open-source components to function effectively. Key among these components are libuv, OpenSSL, and V8

How to prevent prototype pollution vulnerabilities in JavaScript

Safeguard your JavaScript applications from prototype pollution vulnerabilities. Learn how to prevent attackers from infiltrating object prototypes with malicious code, jeopardizing your data and application security. Read about effective strategies, leverage Snyk's potent tools, and shield your JavaScript projects from this critical threat.

How to secure Node.js applications from Open Redirect vulnerabilities

Secure your Node.js applications from Open Redirect vulnerabilities. Learn how to prevent malicious redirection attacks, protect user data, and maintain a strong security posture. Discover best practices, tools like Snyk, and actionable tips to safeguard your Node.js apps.

Best Practices for Developer Security in a Financial Services Institution

Scaling AppSec with Snyk AppRisk

See why Snyk is the tool of choice for AppSec teams to manage software risk.

Secure Adoption in Gen AI Era Report

12 Best Practices for Dev First SAST

Guide to Choosing SAST Solution