Software Supply Chain Security Blog

Research & Perspective_

Our Blog_

Security Beyond the Scan

Analysis on software supply-chain attacks, runtime risk, CI/CD security, and the limits of traditional controls.

From Runtime Behavior to Enforced Policy

September 10, 2026

•

Read Article

Protect Your First Pipeline with Endura

September 9, 2026

•

Read Article

The Cooldown Illusion: Waiting Isn’t Enforcement

September 8, 2026

•

Read Article

Your AI Agent Is the Most Overprivileged Process in Your Org

May 6, 2026

•

Read Article

When the Blast Radius Becomes the Business Model

April 27, 2026

•

Read Article

When Your Security Scanner Becomes the Weapon

March 25, 2026

•

Read Article

const next = await fetch("https://www.endurasecurity.com/next");

Black and white grid pattern with black dots at the intersections, forming a repeating checkered design.

Ready to see what your builds are doing?

Turn pipeline activity into visibility, policy, and action with Endura.

SEE HOW IT WORKS

Endura enforces what your pipeline is allowed to do at the kernel level, blocking unauthorized network connections, file access, and process execution as they happen. Let us show you what that looks like on a real build.

const next = await fetch("https://www.endurasecurity.com/next");

Security Beyond the Scan

From Runtime Behavior to Enforced Policy

Protect Your First Pipeline with Endura

The Cooldown Illusion: Waiting Isn’t Enforcement

The Build is the Breach

Your AI Agent Is the Most Overprivileged Process in Your Org

When the Blast Radius Becomes the Business Model

Axios Was Just Compromised

When Your Security Scanner Becomes the Weapon

Ready to see what your builds are doing?