Opengrep, a fork of Semgrep, raises concerns in open-source security. This blog investigates the motivations behind Opengrep, defends Semgrep’s open-core model, and calls for industry accountability.

Why we shouldn't work together for the greater good of the security industry

SBOMs are more valuable for platform engineers than they are to security engineers today, and why this will help security in the long run.

Build System or Bust and Wrapping Security Tools Using Docker

The Dangerous Rise of the Security Influencers Who Shouldn't Be, and the Oxygen Sucking Echo Chamber It Creates

What happens if everyone thinks AI is table stakes? It become a checkbox feature.

Five Questionable Things About Top Ten Security Lists

Building security tools is the wrong approach