Endor Labs Unveils A New Way To Remediate Application Security Risks – Global Security Mag Online
Summary
The Director of AppSec Operations for a major Fintech company told the Endor Labs team: "Developers fear upgrades because of breaking changes. Marcelo Oliveira, VP of Product Management at Endor Labs, said: "One of the best characteristics of OSS is the degree of constant improvement—there’s a regular flow of upgrades to just about every package. While SCA offerings typically provide information on non-vulnerable versions, none include remediation advice that’s grounded in the context unique to each application. By contrast, Endor Labs uses program analysis at the time of build to see exactly which third-party dependencies are used and how they interact with the application code. AppSec teams can: ● Respond to Emerging Threats: Be ready for the next Spring4Shell with peace of mind that they can obtain a patch to ensure the organization stays safe while the team works to upgrade dependencies ● Balance Developer Workloads: Reduce the urgency of upgrading so developers can focus on releasing their planned features without unexpected delays ● Support FedRAMP Compliance: Mitigate vulnerability risk to protect sensitive information in alignment with government requirements.