Announcing Jit’s AI Agents: Human-directed automation for your most time-consuming AppSec tasks.

Read the blog

Login Connect with Jit

The born-left product security blog

Jit's blogs contains guides to implement the best product security tools, how to build security into your development culture, and best practices for understanding and mitigating product security risk.

All Velocity Security DevOps

Featured

Introducing Jit's Agentic AppSec Platform That Gets Real Work Done

I am beyond excited to announce that we are launching the first ever Agentic Application Security Platform, which will revolutionize the way AppSec teams and engineers work. Jit wi

April 9, 2025

Introducing Jit's Agentic AppSec Platform That Gets Real Work Done preview image

Lessons Learned About Secrets Protection After the Sisense Breach

May 21, 2024

Lessons Learned About Secrets Protection After the Sisense Breach Sisense is a popular monitoring tool that enables users to monitor business metrics from multiple third-party sources in a single dashboard. On April 10, the company informed customers that the sensit

a purple background with a check box and a purple background with a check box and

April 24, 2024

Vulnerability Assessments vs. Penetration Testing: Key Differences Vulnerability Assessments vs. Penetration Testing: Key Differences In the race for technological innovation, companies often sprint toward product launches but find themselves in a marathon when fixin

Unzipping the XZ Backdoor and Its Lessons for Open Source

April 18, 2024

Unzipping the XZ Backdoor and Its Lessons for Open Source Originally posted on The New Stack. By now, you have probably heard about the recently discovered backdoor into versions 5.6.0 and 5.6.1 of the tarballs of the xz utilities, a popular compression/deco

CVE 2023-2033: What is it, and how to fix it?

April 8, 2024

CVE 2023-2033: What is it, and how to fix it?Zero-day vulnerabilities are the surprise no developer wants to get. Because these security flaws are unknown to developers, they have zero days to prepare or mitigate the vulnerability before an expl

a purple background with the words enhance mongodb security for atlas with scalable

April 1, 2024

Enhance MongoDB Security for Atlas With Scalable Tenant Isolation As a company building a SaaS security product, our inherent culture is not only focused on building best of breed security products for our users, but also ensuring that our systems, practices and wor

Jit Announces Open Source License Detection and Tracking

March 25, 2024

Jit Announces Open Source License Detection and Tracking Earlier this year Jit announced Software Bill of Materials, which catalogs every open source component in your codebase – making it easy to understand if you are using an open source component that is

GenAI-Powered Digital Threads Part 1 - A Novel Approach to AI Security

March 24, 2024

GenAI-Powered Digital Threads Part 1 - A Novel Approach to AI Security Engineering organizations today are becoming increasingly data-reliant. All of our tools and stacks accrue large amounts of data that are distributed among tools and platforms––from our code and our

GenAI-Powered Digital Threads Part 2 - A Novel Approach to AI Security

March 24, 2024

GenAI-Powered Digital Threads Part 2 - A Novel Approach to AI Security In our previous blog post, we spoke about borrowing the concept of Digital Threads from the manufacturing world, in order to aggregate disparate company data into a single source––a knowledge graph.

Serverless Security Best Practices

March 13, 2024

Serverless Security Best Practices Serverless architectures are the present (and future) of the cloud. Unlike traditional server-based models, serverless computing removes the infrastructure layer, enabling developers to focus solely o