Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Your SIEM collects millions of events. Your CNAPP monitors cloud configurations. But can either tell you how a developer's Okta group membership led to unexpected production access through three different systems? Can they instantly trace an API key's journey from GitHub to your crown jewel databases?

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

CRAZY Invasive Verification Method... Check out the full video.

In this video, I explore OpenAI’s Codex CLI tool to see how powerful it really is for coding with AI. But things quickly go off the rails… what started as a simple test ended with a surprise identity verification request. Apparently, to continue using the tool, I need to submit a government-issued ID and a photo of myself—something I didn’t expect at all. I talk through the process, show the error I ran into, and share my honest thoughts on this level of access and how invasive it feels for a developer tool.

Kubernetes and cloud-native platforms are transforming how we build and run applications—but traditional backup tools just can’t keep up. They’re complex, slow, and expensive. Enter CloudCasa: The backup and recovery solution built specifically for Kubernetes and cloud-native environments. Key Benefits: Kubernetes backup doesn’t have to be complicated. CloudCasa makes it simple, secure, and cost-effective—whether you're protecting clusters, pods, or VMs. What’s your biggest challenge with Kubernetes backup and recovery? Drop your thoughts below—we’d love to hear from you!

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.