Want to know how to get to #DevSecOps in Three Easy Steps? We can help. sourceclear.com/blog/Three-Eas… via @sourceclear #AppSec

Later today @fariusdoo from @Veracode will be presenting our work at #ASE2019 2019.ase-conferences.org/details/ase-20…

Here is preview of our paper "The Dynamics of Software Composition Analysis" where we develop modular means of combining call graphs derived from both static & dynamic analysis

Understanding the challenges with Product commoditization in SCA - lambdasec.github.io/When-the-going…

Shifting Left to Get Security Right sourceclear.com/blog/Shifting-… via @sourceclear

According to @InfosecurityMag, 7,900 #vulnerabilities didn't make it into the #CVE database in 2017. (infosecurity-magazine.com/news/7900-vuln…) -- @SourceClear can help you find them! Sign up today for a free trial and see what's hiding in your code. sourceclear.com | #AppSec #DevSecOps

Writing an OpenSource Usage Policy sourceclear.com/blog/Writing-a… via @sourceclear

Over 1,000 #CVE's have already been submitted in 2018. How many #vulnerabilities in #opensource have been found but not reported? @SourceClear knows! Sign up for a free trial today and find out what's lurking in your code. sourceclear.com | #AppSec #DevSecOps

Help! My Supply Chain is Exploding sourceclear.com/blog/Help-My-S… via @sourceclear

In today's SourceClear Executive Viewpoint, @alex__ethier explains how Policies can be an enabler for #DevSecOps pipelines. sourceclear.com/blog/Policies-… via @sourceclear #AppSec #DevOps

Announcing Improved User Management with Enterprise Support sourceclear.com/blog/Announcin… via @sourceclear

Mark @Curphey explains why Software Composition is Everything. What goes into your project absolutely determines the security outcomes. sourceclear.com/blog/Compositi… via @sourceclear #DevSecOps

Making @sourceclear proud, our CSO Robert Wood( @HolyCyberBatman) talking at @AppSecCali about the benefits and drawbacks to using #honeypots. You might actually be making #hackers smarter if you use them incorrectly.

Our CSO @HolyCyberBatman describes how to protect your #AppSec people form hitting the wall in this blog titled "Burnout Happens, Protect Your AppSec Assets" sourceclear.com/blog/Burnout-H… via @sourceclear #DevOps #DevSecOps

Check out our integration with @sourceclear to identify the potential risks in your workflow ⚠️ bit.ly/2rXbds9

Our CEO Mark @curphey shares his thoughts on why Diversity and inclusion is the new normal and could be the key to unlocking success in information security. sourceclear.com/blog/Diversity…

Ever wanted/wondered how to run SourceClear on Windows? Here’s a simple solution using @Docker. sourceclear.com/blog/Running-S… via @sourceclear #AppSec #DevOps #DevSecOps

Finding outdated #opensource libraries is great, but knowing where vulnerable methods were used is better. SourceClear can help you with both. Sign up for a free trial today. sourceclear.com - #OpenSource #AppSec #DevSecOps

While finding known vulns with a CVE in #OpenSource is important, most vulns are not reported. SourceClear has 1000's of SVE vulns for subscribers only. Sign up for a free trial. Install the agent on your desktop and run a scan today! sourceclear.com - #AppSec #DevSecOps

Not all Software Composition Analysis is the same. Our CEO Mark Curphey (@curphey) discusses his thoughts on the right questions to ask when selecting your solution partner in #openSource security. sourceclear.com/blog/Not-all-S… via @sourceclear -- #AppSec #DevSecOps

Avoiding False Positives in #OpenSource Component Analysis sourceclear.com/blog/Avoiding-… via @sourceclear #SCA #AppSec #DevOps #DevSecOps

Our CEO, Mark Curphey (@curphey) adds his 2018 #InfoSec predictions to the fray. It boils down to one thing "2018 Will be the Year of the Developer" sourceclear.com/blog/2018-Pred… #AppSec #DevOps #DevSecOps