Login Book a demo

The Future of AppSec, Written Here

Everything you need to embed security into development with AI-powered application security.

All Velocity Security DevOps

an open policy agent as a control engine devsecops conf 2012 rec

September 17, 2024

Open Policy Agent as a Control Engine - DevSecOps Conf 2022 Recap About This content is brought to you by Jit - a platform that simplifies continuous security for developers, enabling dev teams to adopt a ‘minimal viable security’ mindset, and build secure cloud app

a diagram with the words playing around with aws - vault for fun and profits

July 29, 2024

Playing Around with AWS-Vault for Fun & Profit AWS Vault is an open-source tool by 99Designs that enables developers to store AWS credentials in their machine keystore securely. After using it for a while at Jit, I decided to dig deeper into how i

a purple background with a check box and a purple background with a check box and

April 24, 2024

Vulnerability Assessments vs. Penetration Testing: Key Differences Vulnerability Assessments vs. Penetration Testing: Key Differences In the race for technological innovation, companies often sprint toward product launches but find themselves in a marathon when fixin

Unzipping the XZ Backdoor and Its Lessons for Open Source

April 18, 2024

Unzipping the XZ Backdoor and Its Lessons for Open Source Originally posted on The New Stack. By now, you have probably heard about the recently discovered backdoor into versions 5.6.0 and 5.6.1 of the tarballs of the xz utilities, a popular compression/deco

CVE 2023-2033: What is it, and how to fix it?

April 8, 2024

CVE 2023-2033: What is it, and how to fix it?Zero-day vulnerabilities are the surprise no developer wants to get. Because these security flaws are unknown to developers, they have zero days to prepare or mitigate the vulnerability before an expl

GenAI-Powered Digital Threads Part 1 - A Novel Approach to AI Security

March 24, 2024

GenAI-Powered Digital Threads Part 1 - A Novel Approach to AI Security Engineering organizations today are becoming increasingly data-reliant. All of our tools and stacks accrue large amounts of data that are distributed among tools and platforms––from our code and our

GenAI-Powered Digital Threads Part 2 - A Novel Approach to AI Security

March 24, 2024

GenAI-Powered Digital Threads Part 2 - A Novel Approach to AI Security In our previous blog post, we spoke about borrowing the concept of Digital Threads from the manufacturing world, in order to aggregate disparate company data into a single source––a knowledge graph.

Serverless Security Best Practices

March 13, 2024

Serverless Security Best Practices Serverless architectures are the present (and future) of the cloud. Unlike traditional server-based models, serverless computing removes the infrastructure layer, enabling developers to focus solely o

Designing Secure Tenant Isolation in Python for Serverless Apps

March 5, 2024

Designing Secure Tenant Isolation in Python for Serverless Applications About This content is brought to you by Jit - a platform that simplifies continuous security for developers, enabling dev teams to adopt a ‘minimal viable security’ mindset, and build secure cloud app