Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

DevSecOps Unlocked: Fortify Your Software Supply Chain

How can you ensure your software supply chain is resilient and prepared for the challenges ahead? In this exclusive session, we’ll reflect on key lessons from 2024 and showcase how JFrog is leading the way in securing DevOps pipelines for 2025 and beyond. Join us for an engaging conversation with industry experts as we uncover real-world insights, explore actionable strategies, and demonstrate innovations designed to safeguard your software delivery lifecycle in an evolving threat landscape.

Top 7 SAST tools for DevSecOps Teams in 2025

SAST (Static Application Security Testing) tools are crucial for DevSecOps, enabling automated code analysis to identify vulnerabilities early in the development lifecycle. They analyze source code without execution, detecting issues like SQL injection, XSS, and buffer overflows. Popular SAST tools used by DevSecOps teams include Mend, Checkmarx, Snyk, Veracode, BlackDuck, SonarQube, and Semgrep. Integrating SAST into CI/CD pipelines ensures continuous security checks as code is developed.

Proven Best Practices for Safer Code that Work: AppSec for the Win | Webinar Mend.io

In this session, Chris Lindsey discusses proven best practices for building a robust AppSec program, offering actionable insights for both developers and security teams. Chris, with over 35 years of experience in software development and 15+ years in security, shares strategies that helped him run a successful security program.

Beyond Traditional AppSec: Navigating the New Frontier of AI Security with Mend AI

Hear from Bar-El Tayouri, Head of Mend AI, about the urgent need for a new approach to securing AI-driven applications. From understanding novel AI components and their risks to implementing a comprehensive AppSec program, this episode provides actionable insights for organizations building with AI.

42 DevOps Statistics to Know in 2025

DevOps is a set of practices that combines software development (Dev) and IT operations (Ops) to shorten the development lifecycle and deliver high-quality software continuously. It emphasizes collaboration, automation, and integration between previously siloed teams. DevOps aims to improve deployment frequency, reduce failure rates, and accelerate recovery times.

CloudCasa and SUSE Storage: A Cost-Effective Disaster Recovery Solution for Kubernetes and SUSE Virtualization

CloudCasa by Catalogic and SUSE have partnered to deliver a new disaster recovery solution for Kubernetes and SUSE Virtualization environments. This joint approach combines CloudCasa’s Kubernetes-native backup and recovery platform with SUSE Storage (a.k.a. Longhorn) and its Disaster Recovery Volumes feature. This provides a resilient, storage-driven DR strategy that reduces cost, complexity, and recovery times.

VM Backup & Restore on Spectro Cloud | Live Demo for Kubernetes & KubeVirt

Watch a step-by-step live demo of how to back up and restore KubeVirt-based VMs using CloudCasa on Spectro Cloud. This walkthrough covers: Multi-tenant access VM backup workflow with CSI & non-CSI storage Policy-based scheduling & snapshot safe lock Full VM restore with namespace transform Post-restore actions and validation in Palette UI Whether you're running VMs on-prem and migrating to the cloud or need robust Kubernetes backup & disaster recovery, this demo shows you how to do it the cloud-native way.

AI Code Review in 2025: Technologies, Challenges & Best Practices

AI code review leverages artificial intelligence models and machine learning techniques to analyze and provide feedback on source code, automating and improving the traditional code review process. It is crucial for software development workflows, offering significant advantages to developers and teams. AI code review can scan for bugs, style violations, security vulnerabilities, and other issues.

Introducing Mend.io's AI Security Dashboard: A Clear View into AI Risk

Most dashboards are like a busy beach with one lifeguard watching the entire shoreline. They keep an eye on everything, but the sheer scope means that critical issues—like risks in AI applications—can get lost in the crowd. Mend.io’s AI Security Dashboard changes that. It’s like a lifeguard tower posted directly at the AI section of the beach, keeping a sharp, dedicated watch on AI specific risks that other tools overlook.

The case against secrets in .env files

Most developers rely on.env files to store secrets like API keys, database passwords, and tokens. But what if I told you this common practice can leave you wide open to attacks? In this video, I break down why storing secrets in a.env file is dangerous, how attackers can exploit it, and what safer alternatives you should be using instead.