Mayhem Blog

Learn why SCA and AFT are two ideal solutions for transforming your DevOps workflow to a DevSecOp workflow.

In today’s post, we’ll focus on how fuzz testing can help you address those unknown vulnerabilities.

In today’s post, we’ll focus on how software composition analysis can help you address those known vulnerabilities.

In our previous post, we discussed that the key ingredient to a true DevSecOps process is accurate testing. In this post, we’ll share how to implement an accurate application security testing program that effectively manages risk, while protecting developer productivity.

Can machines make cybersecurity decisions autonomously? Accurate testing allows vulnerability detection to be done at machine speed, scale, and automation.

In this blog series, we’ll chronicle the top challenges of incorporating application security testing in DevOps workflows. We’ll also unpack how organizations are addressing these challenges.

Researchers from VDALabs use ForAllSecure's Mayhem to find a stack overflow in MP3Gain, a vulnerability that could allow bad actors to overwrite code.

Learn how to build a structure-aware fuzzer, when it is useful, and how the author found a bug in his first week of fuzzing using this technique.

In a TechRepublic Whiteboard video, host Bill Detwiler speaks to Dr. David Brumley, Carnegie Mellon University professor and CEO of ForAllSecure, about the ways organizations can benefit by using DevSecOps.