By default, Endor Labs AI SAST and AI Chat send model requests to our provider accounts. With BYOK, those model requests go ...

Endor Labs discovered a critical vulnerability in n8n (CVE-2026-25049) that allows unauthenticated users to achieve remote code execution (RCE) via sandbox escape. We discovered a critical ...

Fable 5 has just been released as Anthropic's generally available, safeguarded Mythos-class model, with high expectations following the strong results Anthropic reported across software engineering, ...

Partnership Brings Together Reachability-Backed Static Analysis and Runtime Exploit Validation to prioritize and fix ...

Your developers asked an AI assistant for code this morning, and it shipped by lunch. AI security is the practice of protecting AI systems, using AI to defend other systems, and securing the code AI ...

SAST (Static Application Security Testing) is a white-box method that analyzes an application's source code, bytecode, or binaries for security flaws without running it. It reads code the way a ...

So, what is code security? Code security is the practice of finding, fixing, and preventing security weaknesses in software before it reaches production. It covers your own code, open-source ...

VMs, containers, V8 isolates, WASM and agent sandboxes all promise containment. Here's what each one really stops, what it costs, and where it leaks.

Endor Labs and SpaceXAI are partnering to secure every stage of agentic software delivery on Grok Build, from the first tool call to merged pull requests. AI coding agents now write a large share of ...

Nine days after GPT-6 Sol, Codex with GPT-6.1 Sol scores 77.7% FuncPass and 34.1% SecPass — within one task of GPT-6 Astra on security, a third faster, and with zero confirmed cheating.