Resources
Featured content
- Blog, Resources
The Axios Software Supply Chain Attack: What Happened and Why a Curated Catalog Would Have Stopped It Cold
Axios NPM Breach: Learn how to detect the infection, rotate keys, and secure your supply chain now.
Blog
The Axios Software Supply Chain Attack: What Happened and Why a Curated Catalog Would Have Stopped It Cold
Axios NPM Breach: Learn how to detect the infection, rotate keys, and secure your supply chain now.
Read More
New to ActiveState? Start here.
Automated Vulnerability Management & Remediation with ActiveState
ActiveState enables DevSecOps teams to not only identify vulnerabilities in open source packages, but also to automatically prioritize, remediate, and deploy fixes into production without ...
Read More
Top 3 Uses Cases for Managing Open Source at Scale
Managing open source complexities can slow down development. Point solutions only let you be reactive. Learn how to become proactive.
Read More
Tech Debt Best Practices: Minimizing Opportunity Cost & Security Risk
Tech debt is an unavoidable consequence of modern application development, leading to security and performance concerns as older open-source codebases become more vulnerable and outdated. ...
Read More
Filters
- All
- Blog
- Case Study
- Data Sheet
- Product Demo
- Quick Read
- Video
- Webinar
- Whitepaper
- All
- Blog
- Case Study
- Data Sheet
- Product Demo
- Quick Read
- Video
- Webinar
- Whitepaper
The Axios Software Supply Chain Attack: What Happened and Why a Curated Catalog Would Have Stopped It Cold
Axios NPM Breach: Learn how to detect the infection, rotate keys, and secure your supply chain now.
Read More
SSDF and SLSA for FedRAMP and Regulated Environments: What Are Auditors Actually Looking For?
Learn how SSDF and SLSA help regulated organizations prove provenance, secure builds, and remediation for FedRAMP audits.
Read More
The AI Coding Problem No One Is Governing
Dependency cooldowns reduce blast radius — but they're not a sourcing strategy. Learn why software supply chain security requires provenance and governance, not just patience.
Read More
A Cooldown Is Not a Sourcing Strategy
Dependency cooldowns reduce blast radius — but they're not a sourcing strategy. Learn why software supply chain security requires provenance and governance, not just patience.
Read More
Beyond Scan & Pray: Why Curate & Govern Is the Only Model Built for AI-Speed Risk
Scan & Pray can't keep pace with AI-generated code. Learn why Curate & Govern is the security posture built for the speed and scale of ...
Read More
The Vulnerability Database Security Teams Depend On Just Hit a Structural Ceiling
NIST can no longer enrich all CVEs. If your security program depends on NVD data for prioritization, you now have a documented gap in your ...
Read More
Global Proprietary Trading Firm Hardens Python Supply Chain against Malicious Attacks with ActiveState
Python security for financial firms starts with eliminating public repository risk. See how a global trading firm moved to a private, source-built catalog with ActiveState ...
Read More
The “As Is” Clause Was Never the Problem
The "as is" open source clause was never the problem — enterprise assumptions were. Discover why AI-assisted development has made legacy open source governance untenable, ...
Read More
When “Secure by Default” Only Works in One Tool, You Don’t Have a Governance Model
AI coding assistants are making dependency decisions faster than your team can review them. A tool-level integration only governs the developers who use that tool. ...
Read More
15 Container Security Best Practices for Engineering Teams in 2026
Learn 15 container security best practices for engineering teams, including Kubernetes policies, secrets management, and runtime protection.
Read More
The Quiet Foundation of AI-Native Development
AI agents are resolving open source dependencies at machine speed, with no human in the loop. ActiveState gives your environment the provenance, remediation, and reproducibility ...
Read More
Your Open Source Governance Program Is Already Behind. Here’s How Far.
Most open source software security failures aren't caused by a lack of tooling — they're caused by governance programs that haven't kept pace with how ...
Read More
