Here's why in the SaaS era your organization should consider using SaaSBOMs — and some of the challenges facing their success.

Learn how Third-Party Software Risk Management (TPSRM) builds on TPRM and TPCRM to protect against supply chain attacks and software-based threats.

Leading firms are using DevEx to achieve application security gains at speed. Here's how it works — and how to get started.

AI coding tools are making the memory-safe language Rust a favorite of developers — even those maintaining massive codebases like Microsoft’s.

The new GitHub-based lab aims to tame MCP servers with security server and tool-integration training, demos, and instruction on attack methods.

Grab is moving hundreds of services to Distroless images to cut CVEs but only if workloads still run cleanly. Learn how medium tests became the migration gate, where the scaffolding toil stalled the campaign, and how an agentic workflow (skills, MCP, guardrails)…

Artificial intelligence (AI) agents are evolving from chat interfaces into autonomous workloads, bringing new security risks. In Part 1, discover why Grab built Palana, a Kubernetes-native platform designed to run AI agents safely. We explore the core design…

How do you actually build a secure execution environment for artificial intelligence (AI) agents? In Part 2, we dive deep into Palana's architecture. Learn how Grab handles proxy-mediated secrets, large language model (LLM) routing, and strict network access…

Counter Service powers real-time fraud detection at massive scale, handling billions of requests daily. Learn how we migrated its underlying storage with zero downtime, redesigning the writer data model, incorporating clean data access layer separation on…