Mend.io Full Layout with Copy

Hello test,

Staying ahead means keeping up with new risks, best practices, and real-world lessons from teams like yours. Here’s what’s happening at Mend.io and across the AppSec community this month.

Upcoming Events & Webinars
Join us live to learn how other teams are tackling modern AppSec challenges:
Behind the Curtain of AI: Why System Prompt Security Matters | January 29 | 11 AM ET | Live Webinar

 System prompts shape AI behavior and attackers are exploiting that blind spot. Join Amit Chita and Jeffrey Martin to learn how prompt-level weaknesses enable model manipulation and what security leaders must do to secure this emerging attack surface.

Register here.

Product Updates
New capabilities designed to help you secure modern applications faster.
Power ServiceNow AVR with Mend.io's high-accurate findings
Bring high-accuracy SAST and SCA findings directly into ServiceNow to manage AppSec risk alongside enterprise risk, without added friction.

Don’t let agentic velocity become technical debt.
Agentic tools like Gemini Code Assist, Gemini CLI, and Antigravity accelerate development, but can scale vulnerabilities just as fast. Mend.io integrates SAST and SCA directly into these workflows so developers can detect and fix issues in real time with AI, before code reaches production.

Code-to-cloud risk, finally connected.
Our new Wiz integration unifies SAST findings with cloud context to cut noise, prioritize exploitable risk, and remediate faster without exposing source code.

Popular Reads
Here’s what other security and engineering leaders are reading right now.

Suspicious packages. Hidden risk.
A wave of fake NPM font packages shows signs of split-payload abuse and supply chain evasion.

From Zero to RCE: One Request, Total Compromise
A critical React Server Components flaw enables unauthenticated RCE with a single request.

Customer Quote of the Month
Quote from Bruno Lavit: "Since we started using Mend.io, we are able to deliver products without any high CVEs"
See how Mend.io unifies AppSec risk across code, cloud and AI. Explore the Mend.io platform.