BG Line
BG Line

Tech blogs and updates

Tech blogs and updates

Stay updated with the latest in AppSec, secure coding practices, AI assisted development, and product updates from CodeThreat.

AI code assistants can write insecure or outdated code that “looks” correct. Learn how to spot and prevent hallucinated vulnerabilities.

[AI] [SECURITY]

Jun 12, 2023

Hallucinative-Insecure GPT Code Generation

From null checks to input normalization, learn how to detect and act on suspicious patterns before they turn into security breaches.

[CODE SECURITY] [PRODUCT]

Dec 14, 2022

Catch Malicious Behavior in Your Code Early

Learn how to secure your Redis client usage by avoiding common mistakes like connection string injection, insecure Lua scripts, and unsafe deserialization practices.

[CODE SECURITY] [PRODUCT]

Sep 27, 2022

Securing Redis Clients: Common Pitfalls & Best Practices

Why developers are the first line of defense in application security — and how shifting left can ignite a new security mindset from day one.

[CODE SECURITY] [PRODUCT]

Jul 26, 2022

Shifting Security Leftest: Make Devs Security-First

A deep dive into OWASP Benchmark’s strengths and limitations as a SAST evaluation tool — and what to watch out for when comparing static analyzers.

[CODE SECURITY] [RESEARCH]

May 27, 2022

OWASP Benchmark: How Useful Is It for SAST?

Discover how the Spring Cloud Function EL Injection (CVE-2022-22963) reveals the importance of using least privilege with SpEL evaluations.

[CODE SECURITY]

Apr 25, 2022

Least Privilege in SpEL: Lessons from CVE-2022-22963

Understand CVE-2022-22965 (Spring4Shell), mitigation techniques, and the root cause behind this critical RCE vulnerability.

[CODE SECURITY]

Apr 1, 2022

Spring4Shell: What It Is & How to Dodge It

Reflexive questioning: the developer’s mindset for secure and resilient code.

[CODE SECURITY] [RESEARCH]

Mar 28, 2022

Think Like a Hacker, Code Like a Pro

Learn how URL encoding & whitelist validation can prevent HTTP Parameter Pollution attacks.

[CODE SECURITY] [RESEARCH]

Aug 1, 21

Stop HPP Before It Starts

AI code assistants can write insecure or outdated code that “looks” correct. Learn how to spot and prevent hallucinated vulnerabilities.

[AI] [SECURITY]

Jun 12, 2023

Hallucinative-Insecure GPT Code Generation

From null checks to input normalization, learn how to detect and act on suspicious patterns before they turn into security breaches.

[CODE SECURITY] [PRODUCT]

Dec 14, 2022

Catch Malicious Behavior in Your Code Early

Learn how to secure your Redis client usage by avoiding common mistakes like connection string injection, insecure Lua scripts, and unsafe deserialization practices.

[CODE SECURITY] [PRODUCT]

Sep 27, 2022

Securing Redis Clients: Common Pitfalls & Best Practices

Why developers are the first line of defense in application security — and how shifting left can ignite a new security mindset from day one.

[CODE SECURITY] [PRODUCT]

Jul 26, 2022

Shifting Security Leftest: Make Devs Security-First

A deep dive into OWASP Benchmark’s strengths and limitations as a SAST evaluation tool — and what to watch out for when comparing static analyzers.

[CODE SECURITY] [RESEARCH]

May 27, 2022

OWASP Benchmark: How Useful Is It for SAST?

Discover how the Spring Cloud Function EL Injection (CVE-2022-22963) reveals the importance of using least privilege with SpEL evaluations.

[CODE SECURITY]

Apr 25, 2022

Least Privilege in SpEL: Lessons from CVE-2022-22963

AI code assistants can write insecure or outdated code that “looks” correct. Learn how to spot and prevent hallucinated vulnerabilities.

[AI] [SECURITY]

Jun 12, 2023

Hallucinative-Insecure GPT Code Generation

From null checks to input normalization, learn how to detect and act on suspicious patterns before they turn into security breaches.

[CODE SECURITY] [PRODUCT]

Dec 14, 2022

Catch Malicious Behavior in Your Code Early

Learn how to secure your Redis client usage by avoiding common mistakes like connection string injection, insecure Lua scripts, and unsafe deserialization practices.

[CODE SECURITY] [PRODUCT]

Sep 27, 2022

Securing Redis Clients: Common Pitfalls & Best Practices

Why developers are the first line of defense in application security — and how shifting left can ignite a new security mindset from day one.

[CODE SECURITY] [PRODUCT]

Jul 26, 2022

Shifting Security Leftest: Make Devs Security-First

A deep dive into OWASP Benchmark’s strengths and limitations as a SAST evaluation tool — and what to watch out for when comparing static analyzers.

[CODE SECURITY] [RESEARCH]

May 27, 2022

OWASP Benchmark: How Useful Is It for SAST?

Discover how the Spring Cloud Function EL Injection (CVE-2022-22963) reveals the importance of using least privilege with SpEL evaluations.

[CODE SECURITY]

Apr 25, 2022

Least Privilege in SpEL: Lessons from CVE-2022-22963

FAQ

Frequently Asked Questions

Need help? Our FAQ section covers all the basics to guide your CodeThreat experience smoothly.

FAQ

Frequently Asked Questions

Need help? Our FAQ section covers all the basics to guide your CodeThreat experience smoothly.

FAQ

Frequently Asked Questions

Need help? Our FAQ section covers all the basics to guide your CodeThreat experience smoothly.

What is CodeThreat?

How is CodeThreat different from traditional SAST tools?

What’s the difference between Code Security and Agentic Code Review?

What does the Free plan include?

What languages does CodeThreat support?

Is it safe to analyze my code with CodeThreat?

Does CodeThreat support both SaaS and on-prem deployment?

Which platforms does CodeThreat integrate with?

How is pricing calculated? What is a “contributor”?

What happens when I reach my monthly usage limits?

What is CodeThreat?

How is CodeThreat different from traditional SAST tools?

What’s the difference between Code Security and Agentic Code Review?

What does the Free plan include?

What languages does CodeThreat support?

Is it safe to analyze my code with CodeThreat?

Does CodeThreat support both SaaS and on-prem deployment?

Which platforms does CodeThreat integrate with?

How is pricing calculated? What is a “contributor”?

What happens when I reach my monthly usage limits?

What is CodeThreat?

How is CodeThreat different from traditional SAST tools?

What’s the difference between Code Security and Agentic Code Review?

What does the Free plan include?

What languages does CodeThreat support?

Is it safe to analyze my code with CodeThreat?

Does CodeThreat support both SaaS and on-prem deployment?

Which platforms does CodeThreat integrate with?

How is pricing calculated? What is a “contributor”?

What happens when I reach my monthly usage limits?

BG Image

get started

Ready to ship secure software?

Try CodeThreat with AI-powered reviews and less noise in every commit.

Book a Demo

Book a Demo

Try for Free

Try for Free

BG Image

get started

Ready to ship secure software?

Try CodeThreat with AI-powered reviews and less noise in every commit.

Book a Demo

Book a Demo

Try for Free

Try for Free

BG Image

get started

Ready to ship secure software?

Try CodeThreat with AI-powered reviews and less noise in every commit.

Book a Demo

Book a Demo

Try for Free

Try for Free