Research
Will Your Chip Maker’s PSIRT Warn You About a Flaw? We Checked 40
Vulnerability Disclosure Programmes
Dependabot Has Nothing to Flag on 10 Exploited Flaws for Native Android and iOS Projects
Most of the 550 Connected-Device Apps We Checked Have No Published Way to Report a Security Flaw (That We Could Find)
Your Mobile SBOM Is Wrong in Three Specific Ways
Only 1 in 8 Small Publishers in Europe’s App Store Charts Publish a Security Contact
Laws & standards
Cyber Resilience Act
What Is security.txt, and Does the Cyber Resilience Act Require One?
How to Report a Security Vulnerability in a Smart Device
Vendor Security Requirements
CRA SBOM Requirements
Who Do You Tell About a Flaw in Your App’s SDKs? We Checked 43
CRA Reporting Obligations
Cyber Resilience Act Timeline
Does the Cyber Resilience Act Apply to Your App? Scope and Dates
The Cyber Resilience Act and UK Companies
CRA Compliance Checklist for Software and App Teams
All CRA articles (16)
EN 18031 / RED
Does EN 18031 Apply to Your Device? A Self-Check for Makers
Does EN 18031 Cover Your Companion App and Cloud? A Checklist
UK PSTI
UK PSTI Act: The Three Security Requirements, the Statement of Compliance, and How Many Device Makers Publish One
Product Liability Directive
Product Liability Directive: Can You Be Sued Over a Defective App?
Knowledge Library
Data products
The Engineering Data Products Directory
Mobile Engineering Data Tools
Cloud & SaaS Cost Intelligence
Technographics & Buying-Intent Data
Security Ratings & Vendor Risk Tools
AI / LLM Observability & Evaluation Tools
MCP Server Monitoring & Reliability Tools
Dependency Intelligence & Supply-Chain Tools
Your Post-Quantum Posture Is Your CDN’s Posture
A Quarter of Early MCP Servers Are Already Dead
What Real Stacks Actually Run Together (Data From Public Infrastructure Files)
94% of the Top PyPI Packages Are Free-Threading Ready — Here Are the Blockers
All data products (12)
Data workflow guides
Is This Security Patch Safe to Apply? (a Data-Driven Workflow)
How to Vet a Dependency Before You Commit to It (a Data-Driven Workflow)
AI engineering
What is an AI Engineer? Roles, Responsibilities, and Day-to-Day
Evaluating and Optimizing AI Applications Built with Foundation Models
Implementing and Integrating Foundation Models in AI Applications
Designing AI Applications with Foundation Models
Understanding Foundation Models for AI Application Development
What is AI Engineering, as Defined by Chip Huyen, and Why Does it Matter?
Understanding Spec-Driven Development (SDD) for AI Agents
Vulnerability management
CISA KEV
Tools
Connected-Device Readiness Explorer
CRA Scope Checker
OWASP MASVS to CRA Annex I and EN 18031 Map
SDL Spec Author
Intelligence
Security Patch Impact
Dependency Adoption
Commercial Vendor Intelligence
Sign in
Search for:
Research
Will Your Chip Maker’s PSIRT Warn You About a Flaw? We Checked 40
Vulnerability Disclosure Programmes
Dependabot Has Nothing to Flag on 10 Exploited Flaws for Native Android and iOS Projects
Most of the 550 Connected-Device Apps We Checked Have No Published Way to Report a Security Flaw (That We Could Find)
Your Mobile SBOM Is Wrong in Three Specific Ways
Only 1 in 8 Small Publishers in Europe’s App Store Charts Publish a Security Contact
Laws & standards
Cyber Resilience Act
What Is security.txt, and Does the Cyber Resilience Act Require One?
How to Report a Security Vulnerability in a Smart Device
Vendor Security Requirements
CRA SBOM Requirements
Who Do You Tell About a Flaw in Your App’s SDKs? We Checked 43
CRA Reporting Obligations
Cyber Resilience Act Timeline
Does the Cyber Resilience Act Apply to Your App? Scope and Dates
The Cyber Resilience Act and UK Companies
CRA Compliance Checklist for Software and App Teams
All CRA articles (16)
EN 18031 / RED
Does EN 18031 Apply to Your Device? A Self-Check for Makers
Does EN 18031 Cover Your Companion App and Cloud? A Checklist
UK PSTI
UK PSTI Act: The Three Security Requirements, the Statement of Compliance, and How Many Device Makers Publish One
Product Liability Directive
Product Liability Directive: Can You Be Sued Over a Defective App?
Knowledge Library
Data products
The Engineering Data Products Directory
Mobile Engineering Data Tools
Cloud & SaaS Cost Intelligence
Technographics & Buying-Intent Data
Security Ratings & Vendor Risk Tools
AI / LLM Observability & Evaluation Tools
MCP Server Monitoring & Reliability Tools
Dependency Intelligence & Supply-Chain Tools
Your Post-Quantum Posture Is Your CDN’s Posture
A Quarter of Early MCP Servers Are Already Dead
What Real Stacks Actually Run Together (Data From Public Infrastructure Files)
94% of the Top PyPI Packages Are Free-Threading Ready — Here Are the Blockers
All data products (12)
Data workflow guides
Is This Security Patch Safe to Apply? (a Data-Driven Workflow)
How to Vet a Dependency Before You Commit to It (a Data-Driven Workflow)
AI engineering
What is an AI Engineer? Roles, Responsibilities, and Day-to-Day
Evaluating and Optimizing AI Applications Built with Foundation Models
Implementing and Integrating Foundation Models in AI Applications
Designing AI Applications with Foundation Models
Understanding Foundation Models for AI Application Development
What is AI Engineering, as Defined by Chip Huyen, and Why Does it Matter?
Understanding Spec-Driven Development (SDD) for AI Agents
Vulnerability management
CISA KEV
Tools
Connected-Device Readiness Explorer
CRA Scope Checker
OWASP MASVS to CRA Annex I and EN 18031 Map
SDL Spec Author
Intelligence
Security Patch Impact
Dependency Adoption
Commercial Vendor Intelligence
Security Patch Impact
