Kiuwan Shines in the Fall 2020 G2 Grid Report We’re excited to announce that Kiuwan Code Security and Insights solutions have been recognized in the Fall 2020 G2 Grid Report for Static Code Analysis, due in large part to an overall customer satisfaction ratin...
Development tools are growing more advanced; large language models can now write code for us based on simple, plain English requests. Unfortunately, malicious actors also have access to increasingly powerful tools. As a result, cybersecurity risk management h...
Delivering a secure mobile app to users requires developers to prioritize security throughout the software’s development pipeline. An organization’s System Development Life Cycle (SDLC) should include clear and straightforward security instructions that...
October is Cybersecurity Awareness Month. The theme for 2020 is: “Do Your Part. Be #CyberSmart.” This event, put on by CISA and the National Cyber Security Alliance, is in its seventeenth year. The campaign aims to increase overall cybersecurity aw...
With cybersecurity incidents increasing at an alarming rate, modern development teams are transitioning to a DevSecOps framework to integrate security into the entire software development lifecycle (SDLC). This approach helps create more secure and resilient ...
The Kiuwan team is excited to announce the availability of our latest release, featuring extended support for JSX React, the ability to check for dynamic components built using an Angular framework; and an updated plugin for Jenkins. Angular dynamic component...
With an ever-increasing proportion of day-to-day work on the desktop occurring in the form of web-based applications, organizations need to rethink how those applications work. They also need to examine—and in some cases tighten up—how web-based apps (or rath...
Amidst growing cybersecurity threats, the security of the software we write has become increasingly important. To help prevent cyber attacks, DevSecOps has become standard practice among many development teams. One of the most powerful tools in DevSecOps is ...
As applications become increasingly cloud-based – or even, cloud-native – more and more such code is sending data to and from cloud-based stores, both public and private. This makes the methods and controls that such applications use to access the cloud of pa...
Most of us who have been responsible for the care and feeding of an enterprise application have had to modify someone else’s code. Whether the modification is due to a newly found bug or to enhance existing functionality, changing someone else’s code is an in...
Web application security requires a multi-layered approach that accounts for and mitigates all attack surfaces. Given the complexity of modern applications, overlooking even a minor detail can leave them vulnerable. Take the example of the Microsoft “Bl...
Open-source software dramatically simplifies and speeds up the development process. However, it also carries significant risks due to vulnerabilities. The public nature of open-source code means that databases such as Open Source Vulnerabilities (OSV), which ...
