80% of code in modern applications is code your developers didn’t write, but “borrowed” from the internet. With over 3M Open Source Software (OSS) projects, 43M versions, and 3.1T downloads yearly, development teams can gain tremendous benefits from leveraging the OSS ecosystem, as long as organizations invest in the tooling to address the security, scalability and sustainability challenges that come with it. At Endor Labs, we've created the first open source dependency lifecycle management platform to help OSS consumers select, secure and maintain dependencies effectively.
External link for Endor Labs
125 University Ave
Ste 88
Palo Alto, California 94301, US
Amsterdam, NL
Endor Labs reposted this
Our partnership with Endor Labs empowers seamless management, prioritization, and remediation of supply chain risks. Here's a breakdown of how we integrate to streamline your software supply chain security... https://lnkd.in/gYrDKU9H #integrationpartners #softwaresupplychain #shipsecurecode
Will you be at #BlackHat this year? Endor Labs will host several exclusive events for executives throughout the week at Black Hat 2024. If you are around that week we’d love for you to join us. Space is limited, so fill out the form below and save your spot! https://hubs.ly/Q02Gt7b_0 #BlackHat24 #LasVegas #AppSec
Endor Labs reposted this
Only one week left until the "𝐖𝐡𝐚𝐭 𝐢𝐬 𝐚𝐧 𝐎𝐒𝐏𝐎?" live webinar! Join us as we cover: ✅ What an Open Source Program Office (OSPO) can include ✅ Who should be part of the OSPO ✅ The value and benefits of an OSPO ✅ Lessons learned from OSPOs Russ Eling, founder of OSS Consultants and creator of one of the first large-scale OSPO programs and Chris H., Chief Security Advisor at Endor Labs & President, Aquia will be diving into these topics during the webinar. Got more questions about #OSPOs? Drop them in the comments below. https://lnkd.in/gB2jsXe6
Your SCA tools should look at both leading and lagging indicators of risk. 𝐖𝐡𝐚𝐭 𝐝𝐨𝐞𝐬 𝐭𝐡𝐢𝐬 𝐦𝐞𝐚𝐧? Lagging indicators—like known vulns—are risks already present in your environment Leading indicators—like unmaintained packages—are issues that are likely to cause problems in the future 𝐏𝐫𝐨 𝐓𝐢𝐩: Find out what types of risks the SCA tool can detect. Pick an SCA tool that can detect the OWASP OSS Top 10 risks, including unmaintained software, projects with declining activity or quality, outdated software, name confusion attacks, and even the compromise of legitimate packages. Not just known vulnerabilities. Find more questions you can ask your software composition analysis vendor here: https://lnkd.in/gzyD44eA #SCA #OWASP #OSS #AppSec
Join us for a chat tomorrow, Wednesday, July 17, at 9:00 a.m. PT. AppSec / ProdSec teams have more tools and processes to deploy and manage across the SDLC, CI/CD pipelines and pipeline integrations. These are complex and expensive. An emerging solution to this problem is to create independent pipelines for executing security tasks in CI/CD. Learn about common patterns and tradeoffs for security pipelines in this introductory webinar. https://hubs.ly/Q02Gtf640 #AppSec #SecurityPipeline Kayra Otaner Jamie S. Darren Meyer
Will you be at #BlackHat this year? Endor Labs along with Astrix Security is hosting an Exclusive CISO Breakfast on the 7th August 🍳 We'll have great food, even better conversations. Limited spots —DM us for details.
Who’s ready for Vegas? 🙋 With #BlackHat around the corner, we’ve got tons of exciting things lined up: 🗓️ August 7-8 | Participate in our interactive prize challenge, chat with our experts, and find out why Astrix is the leader in #NHI security. See you at Booth SC521. 🍳 August 7 | Start your morning with our Exclusive CISO Breakfast hosted with Endor Labs. Great food, even better conversations. Limited spots —DM us for details. 🥂 August 7 | Find us at the CyAlliance® Annual Networking Party Event at #BlackHat. We can’t wait! 🍽️ August 8 | Excited to join our partner, EverSec Group, Inc., at their Customer Dinner at Delilah for great discussions and delicious food. 📢 Pre-book a session with our team for a dive deep into how you can close the NHI Security gap with Astrix: https://lnkd.in/g8PJYMTb See you in there? 🎲
🚨Big news! Endor Labs secures a strategic investment from Citi Ventures! 🚨 Never a dull moment on our forest moon. Financial institutions nowadays outpace some technology companies on innovation, all while being heavily regulated. The need to move fast and stay safe is why BFSI makes up some of Endor Labs' biggest customers! This endorsement makes it even clearer we're headed in the right direction: “Endor Labs represents the next major innovation in application security,” said Matt Carbonara ✅ , Head of Enterprise Tech Investing at Citi Ventures. “Their platform represents a technological step change in how vulnerabilities are analyzed. For a long time now, developers have had to manually analyze vulnerabilities to assess if they are exercised in production. We believe that the reachability analysis provided by Endor Labs will be a must-have technology for enterprises, focusing developers’ efforts on only the most critical and reachable vulnerabilities and saving them countless hours. We’re extremely excited to become investors and partner with Varun Badhwar and team.” https://hubs.ly/Q02Gz4xr0 #CitiVentures #AppSec
Join Kayra Otaner (Director of DevSecOps at Roche) and Jamie S. from Endor Labs to learn how you can and should create an independent pipeline for executing security controls and tools across all your enterprise-wide CI/CD pipelines.
Join Jamie S. and Darren Meyer for our next webinar: 𝐖𝐡𝐚𝐭'𝐬 𝐚 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐏𝐢𝐩𝐞𝐥𝐢𝐧𝐞? As AppSec / ProdSec teams have more tools and processes to deploy and manage across the SDLC, maintaining CI/CD pipelines and pipeline integrations for security purposes is getting more complex and expensive. An emerging solution to this problem is to create independent pipelines for executing security tasks in CI/CD. Learn about common patterns and tradeoffs for security pipelines in this introductory webinar. #webinar #appsec #security #cybersecurity #sca
This content isn’t available here
Access this content and more in the LinkedIn app
We’re talking about Security Pipelines! Join us for a chat on Wednesday, July 17, at 9:00 a.m. PT. Darren Meyer, Staff Research Engineer at Endor Labs, will be hosting this session featuring Kayra Otaner, Director of DevSecOps at Roche, and Jamie S., Founding Product Manager at Endor Labs. They’ll dive into "What's a Security Pipeline?" AppSec / ProdSec teams have more tools and processes to deploy and manage across ❇️ The SDLC ❇️ CI/CD pipelines ❇️ Pipeline integrations These are complex and expensive. An emerging solution to this problem is to create independent pipelines for executing security tasks in CI/CD. Learn about common patterns and tradeoffs for security pipelines in this introductory webinar. https://lnkd.in/gPrY-Ugs #webinar #appsec #security #cybersecurity #sca
Join us at the Cloud Security Alliance - SF Chapter meet-up on Tuesday, July 23rd at 5:30 PM at the Endor Labs HQ in Downtown Palo Alto! Network over food and drinks while enjoying talks by experts from the SANS Institute and Endor Labs. Dan deBeaubien will discuss Generative AI, Business Risk, and Opportunities, and Jamie S. will talk about- The SCA Balancing Act: Understanding Tradeoffs, What to Do and Avoid. We look forward to seeing you there! Find the RSVP link in the comments below 👇