Never miss what your AppSec competitors ship.
419 updates from 12 AppSec companies this past week. We read them all so you don't have to.
✓ Start tracking competitors within minutes
✓ Receive updates on their activities
✓ No credit card required
150,000+ companies tracked · 137M URLs counted · Tracking since 2025 · GDPR compliant · EU infrastructure
This page collects Application Security Platforms industry news from the companies themselves. Parano.ai tracks 12 companies in this market, including Aikido, Aqua Security, Checkmarx, Endor Labs, Mend and 7 more, and turns what they publish and change into digestible intel reports, battlecards and sales enablement assets.
Most active in the last 7 days, mostly changelog entries and event pages:
Every summary links to its public source.
Oct 15 – Oct 22, 2026
This is last week's digest for AppSec. Get one built for your actual competitors →
Tracking 12 AppSec vendors like this?
Tracking since 2025 · GDPR compliant · EU infrastructure
Semgrep Rolls Out Detect-2Shell Workflow for Node and PHP Vulnerabilities
Endor Labs Fixes Path Traversal Vulnerability in local-operator
PyJWT Vulnerability Affects HMAC Token Security Prior to 2.14.0
Endor Labs Details Fleet Authentication Bypass Vulnerability
Endor Labs Details vm2 Security Advisory for node:sqlite
Endor Labs Details Capacitor Android and iOS Security Vulnerability
PyJWT Vulnerability Affects HMAC Token Verification
Podman Vulnerability Bypasses Container Creation Restrictions
Endor Labs Details simple-git Unsafe Command Configuration Vulnerability
Endor Labs Details Security Vulnerability in StAX Validator
Endor Labs Details vm2 Security Advisory Regarding HTTPS Credentials
Orca Security Hosts Orcathon Innovation Event
Tracking 12 AppSec vendors like this?
Mend Celebrates Team Gathering and New Hire in Cracow
Sonar Enables Remediation Agent to Fix Hunter Agent Findings
Sonar Explains Agentic Centric Development Cycle (AC/DC) Workflows
OX Security Hosts OX After Hours Event in Tel Aviv
Semgrep Releases Detect-2Shell Workflow to Identify Vulnerable Node and PHP Versions
Wiz Code Launches First IRL Halloween CTF in NYC
SonarQube Shares Upcoming Webinar Series for Gitar Verification Agent
Orca Achieves Zero Critical Vulnerabilities for Customer in 30 Days
Endor Labs Shares Applied AI Playbook for AppSec
Snyk Joins SpaceX Super Intelligence as a Launch Partner
Snyk Launches Evo Agentic AppSec to Combat AI-Driven Vulnerabilities
Aikido Joins SpaceX Super Intelligence Partner Network
Aikido Expands Free PHP2Shell Fix Coverage to Legacy PHP Versions
Aikido Co-Founder Discusses AI-Driven Cybersecurity Threats in Reuters
Sonar Joins SpaceX Super Intelligence Partner Network
SonarQube Shares Guide to Mitigating PHP2Shell Vulnerabilities
Semgrep Integrates PHP2Shell Vulnerability Detection into Guardian Plugin
Semgrep Discusses Risks of Rapid Deployment at Gartner Symposium
Checkmarx One Drives Rapid Vulnerability Remediation for Global Fintech
Orca Launches Discovery AI Powered by Amazon Bedrock
Mend Discusses AI Security Challenges at GPSEC Philadelphia
Endor Labs Joins SpaceX Super Intelligence Partner Network
Endor Labs is Hiring for Engineering and Security Roles
Snyk Launches Evo Remediation Agent in Open Preview
Snyk Explains Critical PHP Remote Code Execution Vulnerabilities
Parano.ai · Industry news · AI-Powered Competitive Intelligence