Introducing CI/CD Security with Endor Labs | Endor Labs
Endor Labs CI/CD helps organizations secure their pipelines through pipeline discovery, repository security posture management, and build integrity verification (artifact signing).
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
27 matching stories — new capability, in Software Supply Chain Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Introducing Evo Agentic AppSec: Security That Keeps Up With AI Development
AI-driven development is outpacing traditional security workflows. Snyk’s Agentic AppSec uses security agents to find, fix, and verify vulnerabilities continuously, while humans set the bar.
Introducing Wiz AI SAST: Application Security that Understands Your Code and Your Infrastructure
Find, validate, and fix complex business logic flaws with an AI code scanner backed by Wiz Research, operationalized within your existing security program.
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.
Introducing the Wiz Partner Alliance Managed Service Provider Program
Empowering managed services partners to deliver world-class cloud and AI security at scale
Introducing Cycode Workstation Protection: ADLC Security Now Stops Software Supply Chain Attacks
Workstation Protection builds on the AI visibility, governance, and guardrails of the Cycode platform, blocking malicious packages ... The post Introducing Cycode Workstation Protection: ADLC Security Now Stops Software Supply Chain Attacks appeared first on Cycode.
OX Security Launches OX Cloud, Redefining Cloud Security for the Agentic Era
OX Cloud introduces a new class of cloud security built for AI agents that access data, call tools and take action – with real-time visibility into what they can reach, what they are doing and when they cross intended boundaries NEW YORK, Sept. 16, 2026 — OX Security today launched OX Cloud, a next-generation cloud […] The post OX Security Launches OX Cloud, Redefining Cloud Security for the Agentic Era appeared first on OX Security.
Introducing Agentic Code Scanning: The Holistic Cycode System Around Any Model
TL;DR: Agentic Code Scanning is the fourth dimension of Cycode's code scanning spectrum, not a separate product bolted on... The post Introducing Agentic Code Scanning: The Holistic Cycode System Around Any Model appeared first on Cycode.
Introducing deny list egress policies for Harden-Runner
A new denied-endpoints input blocks the destinations you name and leaves everything else reachable. Here is why that matters, and how to use it to stop CI from bypassing your package proxy
Introducing JFrog Preview: Getting New Capabilities Into Your Hands, Faster
TLDR: “Preview” isn’t a lightweight version of GA, and it isn’t a beta with a new name on it. It just changes the timing and access. You’ll see new JFrog capabilities the day they’re ready for real use, not the day they’re ready for a press release. We’re starting at swampUP 2026. As we know, …
Aikido launches agentic pentesting for Android apps
Aikido's agents pentest your Android app and its backend in a single whitebox assessment. You get reproducible findings, AutoFix, and retests for every issue. Category: Product & Company Updates
MAGECART TURNS TRUSTED GTM INTO A LAUNCHPAD FOR SMARTER SKIMMERS
Magecart Turns Trusted GTM Into a Launchpad for Smarter Skimmers Payment-skimming attacks are continuing to abuse Google Tag Manager (GTM) as a trusted path into checkout pages, while changing what happens after the malicious code reaches the browser. Recent findings included chained GTM containers, payload delivery through Google Firestore, long-running campaigns rotating through new containers, The post MAGECART TURNS TRUSTED GTM INTO A LAUNCHPAD FOR SMARTER SKIMMERS appeared first on Source D
Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chain
It’s 2 p.m. on a Tuesday. Your primary region goes down. Your software artifacts have been syncing to your Disaster Recovery site the way they were designed to, but your projects, permissions, and security policies were never part of the package. Instead of flipping the lights back on, your platform team is scrambling to manually …
Bring Your Own CA: Introducing the Thales Imperva SSL Integration Center, Featuring DigiCert Trust Lifecycle Manager
Somewhere in your estate right now, a certificate is counting down to its expiry date. Today you probably know which one, because renewals still come around annually and someone owns the calendar. The industry is taking that comfort away: the CA/Browser Forum has voted to cut the maximum TLS certificate lifespan to 47 days by […] The post Bring Your Own CA: Introducing the Thales Imperva SSL Integration Center, Featuring DigiCert Trust Lifecycle Manager appeared first on Blog.
Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code
Snyk Studio integrates with Snowflake Cortex Code to scan AI-generated code, dependencies, and containers for vulnerabilities during development.
Introducing Agentic Workflows: Put Agents to Work for Security
AI coding agents are shipping code to your repositories right now... The post Introducing Agentic Workflows: Put Agents to Work for Security appeared first on Cycode.
Introducing Secret Exfiltration Protection for GitHub Actions
StepSecurity now blocks and detects secret exfiltration in GitHub Actions, stopping attacks that plant malicious workflows to steal your repository secrets.
Introducing Device Policy: Enforce Approved VS Code Extensions Across Your Fleet
Device Policy lets security teams allow-list VS Code extensions and enforce it fleet-wide through Intune, Jamf, Kandji, or the DMG agent. No MDM required.
Repository-Scoped API Tokens Now Support Reachability Scans
Announcing Agentic Development Security (ADS)
Announcing Snyk Agentic Development Security, a new Evo solution that helps organizations securely adopt AI-driven development with visibility, governance, and control.
Introducing Manifest Foreign Risk: FOCI Visibility for Open Source Software
Manifest Foreign Risk gives security teams the ability to identify open source contributors tied to sanctioned nations, foreign militaries, and intelligence agencies before software ships. Available now.