Security & Analysis
31 posts on Security & Analysis.
AI can find it, but can you fix it everywhere? The playbook for secure code at scale
Detectors surface findings faster than teams close them. A recipe-driven playbook for automated vulnerability remediation across every layer of your stack.
Type-aware code search, all the way up the chain
A grep can't tell you List.add is really Collection.add. Trigrep resolves the whole type chain in the index, so a coding agent gets the answer in one query.
Challenges in post-quantum cryptography: Finding and fixing quantum threats at scale
Discover how Moderne helps enterprises prepare for post‑quantum cryptography by finding and fixing quantum‑vulnerable code across massive, interconnected systems.
Agentic coding alone can't close the Mythos remediation gap
Mythos made discovery cheap. Closing the vulnerabilities it finds is a different problem. Why agentic coding alone won't close the remediation gap.
Code generation was the easy part
Six engineering leaders on what gets hard after AI writes the code.
Context engineering: why AI coding agents spend most of their tokens reading, not writing
Only 3% of engineers said token cost was their biggest AI coding problem. 42% said agents don't fit their architecture. Why context engineering is the real fix.
Finding every way a Spring controller commits a response too early
How OpenRewrite's taint analysis finds every way a Spring controller commits a response too early, including the edge cases pattern matching misses.
From grep to Moderne Trigrep: Faster, token-efficient code search for agents and large codebases
Moderne Trigrep is indexed, type-aware code search that returns sub-second results across thousands of repositories, for developers and coding agents.
Semantic code search: a foundation for developer collaboration
Modern engineering depends on understanding code before making changes. See how semantic search provides accuracy for refactoring, auditing, and modernization at scale.
From tech debt to tech stack liquidity: A new model for modernization
Technical debt is continuous. Explore how tech stack liquidity and automated refactoring help enterprises modernize faster, reduce risk, and stay ahead of framework change.
Overlapping taint sources: A challenge in static analysis solved
Traditional static analysis mislabels taint sources and creates noise. Learn how multi-type, usage-aware taint analysis improves accuracy and unmasks real security risks.
Backpatch enterprise software and stay secure on your terms
Backpatching keeps older software secure until you are ready to upgrade. What makes it hard at enterprise scale, and how Backpatch Alliance handles the fixes.
Modern, scalable AppSec: Advances in automation and AI security
Learn how to modernize AppSec with automated fixes for legacy code, AI security threats, and compliance needs.
Autonomous testing and the future of developer productivity
Learn how autonomous testing, AI, and intelligent profiling are redefining enterprise codebase management and developer productivity.
Tech debt, AI, and the future of software engineering: Lessons from GartnerAPPS 2025
Explore what the 2025 Gartner Application Innovation Summit revealed about modernizing legacy systems, managing tech debt, and navigating the real impact of AI-powered development tools.
From refactoring chaos to code confidence: How Morgan Stanley is tackling tech debt at scale
Discover how Morgan Stanley addresses tech debt across 50k repos—refactor and modernize code at enterprise scale.
Transforming healthcare software delivery: MEDHOST’s journey with Moderne
Learn how MEDHOST tackled technical debt with automated code refactoring and quality, transforming its software delivery process.
Interactions replaces Veracode with Moderne for vulnerability remediation and much more
Learn why Interactions chose Moderne to automate vulnerability remediations, Java migrations, and code standardization.
AI code search at scale: Finding method invocations with natural language
Discover the power of searching your entire codebase for method invocations using OpenRewrite recipes that leverage a two-phase AI pipeline.
Mass migration of nullability annotations to JSpecify
See how to migrate nullability annotations to JSpecify at mass scale using OpenRewrite and Moderne.
Four ways to fix security vulnerabilities across every repository
Find and fix security vulnerabilities across every repository: exposed secrets, code weaknesses, vulnerable dependencies, and outdated frameworks.
Deploying AI LLMs on CPUs: Navigating efficiency and scalability
Learn about our real-world implementation of LLMs on CPUs for mass-scale code refactoring and analysis work within the Moderne Platform.
Code impact analysis at scale starts with seeing the whole codebase
See the blast radius of a code change before you make it. Moderne code visualizations turn recipe data from every repository into charts and graphs.
Exploring the power of Moderne data tables for code impact analysis and automated remediation
Unlock the power of real-time impact analysis with Moderne's data tables. Make swift, informed code decisions and auto-remediations to upgrade and secure your code.
Software modernization pays off in business agility and tech stack liquidity
A three-week Spring Boot upgrade now takes part of a day. What software modernization pays back in agility and security, and how recipes cut the cost
Find personally identifiable information (PII) and secrets exposed by your APIs
Learn how to find personally identifiable information (PII) exposed by APIs and protect sensitive company data.
Dependency updates unmasked: Version bumps don’t keep your code secure
Learn the limitations of patch version updates for fixing security dependencies. Dive into real data and find out what’s needed for fully automated remediation.
O’Reilly report: Automated code remediation and securing the software supply chain
Learn the patterns, practices, and tech behind automated code remediation that enable you to stay ahead of security vulnerabilities and the competition.
The role of auto-remediation in DevSecOps: Improving security and speeding up development
Learn about the role of automated code remediation in DevSecOps and why auto-remediation through the Moderne platform is the way forward.
The future of AppSec: Emerging trends and new best practices
We explore emerging trends in application security (AppSec) as well as existing and new best practices, and the shift in security vulnerability remediation.
Case study: Improving risk profile and DevEx with automated code remediation in financial services
Check out this case study on modernizing code automatically at scale—Moderne fixes vulnerabilities, migrates code to dramatically reduce technical debt.
No posts in this topic.