Endor Labs’ Post

Mark your calendars for September 12th, 5:30 pm PT, and meet us at the Endor Labs HQ for the Bay Area #Bazel Meet-up! Alexandre Wilhelm, Senior Software Engineer at Endor Labs and Alex Eagle Co-Founder of Aspect Build will will share how to make your monorepo scanning more efficient and how to customize BUILD files using #Starlark Gazelle Extensions. Register here: https://lnkd.in/gKHQuRkG #Bazel #AppSec #Gazelle

Our annual Dependency Management Report is almost here! We’re excited to share the latest trends in OSS dependency management that you’ll want to consider for your SDLC security strategy. Join us on September 24th, 2024, at 9 AM PT for a webinar where we’ll dive into the report’s key findings. Here’s a sneak peek at what’s coming: 🔍 Effective prioritization is key to dependency management. 🚨 Public advisory databases alone aren’t enough for managing dependencies. 👀 AI makes programming easier, but managing dependencies more complex. Henrik Plate and Darren Meyer will walk you through more hot findings during this session. Register here👇

Summer break is coming to an end, kids are heading back to school, and Endor Labs is making it much easier to secure your applications! There’s a lot new this month. Check our August 2024 newsletter to see what we've been up to! #AppSec #OpenSource #cybersecurity

As an AppSec Engineer, you’re often asked tough questions: 👉 Why is this fix so urgent? 👉Can it wait? 👉Will the upgrade break anything? When you can’t provide clear answers, your credibility — and trust — can take a hit. That’s where Endor Labs comes in with Upgrade Impact Analysis and Magic Patches 🔥 𝐔𝐩𝐠𝐫𝐚𝐝𝐞 𝐈𝐦𝐩𝐚𝐜𝐭 𝐀𝐧𝐚𝐥𝐲𝐬𝐢𝐬 shows you and your developers what vulnerabilities you can fix with package upgrades easily, without breaking your applications. It also identifies situations where breaking changes will get introduced, so those upgrades can be thoughtfully planned and executed. 🔥 𝐄𝐧𝐝𝐨𝐫 𝐌𝐚𝐠𝐢𝐜 𝐏𝐚𝐭𝐜𝐡𝐞𝐬 are trusted patches we provide you on your existing package versions, when upgrades are too painful, or will take too long. This is a game changer for organizations that struggle for months or even years trying to upgrade foundational platform libraries like Spring, jackson-databind, snake-yaml, etc. Watch these capabilities in action here: https://lnkd.in/gcFAw7hc #AppSec #SCA #DevOps #SecurityEngineers

Fixing every single vulnerability flagged by an SCA tool isn’t realistic—and it’s definitely not the best use of your time (or your developers’). So, what can you do instead? Focus on 𝐩𝐫𝐢𝐨𝐫𝐢𝐭𝐢𝐳𝐢𝐧𝐠 𝐫𝐢𝐬𝐤𝐬 that are reachable, fixable, and exploitable. 🔍 Endor Labs’ function-reachability analysis zeroes in on the specific portions of vulnerable code in a dependency that your application actually uses. With additional filters like EPSS, Endor Labs helps AppSec teams cut through 92% of the noise. ✅You can also set up fine-tuned action policies based on these prioritization filters to stop serious threats from ever reaching production, all while keeping developers in the loop. Learn more about Endor Labs’ prioritization features here: https://lnkd.in/gzEDEJsJ #AppSec #SCA #OpenSource

Join us on September 12th, 5:30 pm - 8:00 pm PT, at the Endor Labs HQ in Palo Alto for the Bay Area #Bazel Meet-up! Alexandre Wilhelm , Founding Engineer at Endor Labs and Alex Eagle Co-Founder of Aspect Build will share how to make your monorepo scanning more efficient and how to customize BUILD files using #Starlark Gazelle Extensions. It’s a great chance to connect, learn, and take your development process to the next level. Register here: https://hubs.ly/Q02LYT7Q0

🔊Noisy alerts, hidden risks and mysterious upgrades- SCA tools can be a real headache, huh? Using program analysis at the time of build, Endor Labs can see exactly what is in your 3rd-party dependencies and how they interact with your application code. We help you: ✅ Create an accurate inventory of your open source dependencies. ✅ Correlate those dependencies with a reliable vulnerability database. ✅ See all the risk, from vulnerabilities to unmaintained packages, that could potentially threaten your application. Want to dive deeper? Check out our latest blog! 👇 https://hubs.ly/Q02M7BJf0 #AppSec #SCA

💥 What a fantastic way to kick off the morning!! We're thrilled and proud to announce that Endor Labs is now available on #AzureMarketplace, Endor Labs for #AzureDevOps and Endor Labs for #GitHub! This not only makes procurement a breeze and speeds up the time-to-deployment for new projects, but buying through Azure also means you can count the purchase towards your Microsoft Azure Consumption Commitment (MACC). More on this here: https://lnkd.in/gXzcQPTV #SCA #Azure #Microsoft Tom Davis | Azeem Nizam | Tom Pauly | Andrew Davidson