Announcing Jit’s AI Agents: Human-directed automation for your most time-consuming AppSec tasks.

Read the blog

Login Book a demo

The Future of AppSec, Written Here

Everything you need to embed security into development with AI-powered application security.

All Velocity Security DevOps

Unzipping the XZ Backdoor and Its Lessons for Open Source

April 18, 2024

Unzipping the XZ Backdoor and Its Lessons for Open Source Originally posted on The New Stack. By now, you have probably heard about the recently discovered backdoor into versions 5.6.0 and 5.6.1 of the tarballs of the xz utilities, a popular compression/deco

CVE 2023-2033: What is it, and how to fix it?

April 8, 2024

CVE 2023-2033: What is it, and how to fix it?Zero-day vulnerabilities are the surprise no developer wants to get. Because these security flaws are unknown to developers, they have zero days to prepare or mitigate the vulnerability before an expl

Jit Announces Open Source License Detection and Tracking

March 25, 2024

Jit Announces Open Source License Detection and Tracking Earlier this year Jit announced Software Bill of Materials, which catalogs every open source component in your codebase – making it easy to understand if you are using an open source component that is

GenAI-Powered Digital Threads Part 1 - A Novel Approach to AI Security

March 24, 2024

GenAI-Powered Digital Threads Part 1 - A Novel Approach to AI Security Engineering organizations today are becoming increasingly data-reliant. All of our tools and stacks accrue large amounts of data that are distributed among tools and platforms––from our code and our

GenAI-Powered Digital Threads Part 2 - A Novel Approach to AI Security

March 24, 2024

GenAI-Powered Digital Threads Part 2 - A Novel Approach to AI Security In our previous blog post, we spoke about borrowing the concept of Digital Threads from the manufacturing world, in order to aggregate disparate company data into a single source––a knowledge graph.

Serverless Security Best Practices

March 13, 2024

Serverless Security Best Practices Serverless architectures are the present (and future) of the cloud. Unlike traditional server-based models, serverless computing removes the infrastructure layer, enabling developers to focus solely o

Designing Secure Tenant Isolation in Python for Serverless Apps

March 5, 2024

Designing Secure Tenant Isolation in Python for Serverless Applications About This content is brought to you by Jit - a platform that simplifies continuous security for developers, enabling dev teams to adopt a ‘minimal viable security’ mindset, and build secure cloud app

Born Left vs. Shift Left Security, and Your First Security Developer/Architect

March 5, 2024

Born Left vs. Shift Left Security, and Your First Security Developer/Architect About This content is brought to you by Jit - a platform that simplifies continuous security for developers, enabling dev teams to adopt a ‘minimal viable security’ mindset, and build secure cloud app

a checklist with the words bootstrapping a secure aws as - code

March 5, 2024

Bootstrapping a Secure AWS as-Code Environment—Your MVS Checklist IaC streamlined AWS as-code environments, but what about security? Enter MVS.