Kubernetes 1.33 was released today.
Veracode has been granted a United States patent for its generative artificial intelligence security tool, Veracode Fix.
This AI-powered technology assists developers to fix vulnerabilities instantly across 11 languages in all integrated environments, helping strengthen an organization’s security posture.
Automating the remediation process, Veracode Fix enables organizations to accelerate innovation and growth by seamlessly remediating vulnerabilities across the software development life cycle. Launched in April 2023, the capability was the first to combine artificial intelligence and human expertise to automate fix suggestions for security flaws in code.
“This is a major milestone for Veracode,” said Tim Jarrett, Group Vice President of Product Management. “The Veracode Fix patent demonstrates our unwavering commitment to customers by offering innovative security solutions that help organizations manage and remediate application risk at scale.”
This patent (US12229040B2) addresses the critical challenge of remediating risk in complex application environments. By applying extensive knowledge of code vulnerabilities and AI-driven intelligence, Veracode empowers organizations to:
- Proactively reduce their attack surface
- Accelerate vulnerability remediation
- Improve operational efficiency
- Deliver secure applications with greater confidence
Veracode Fix was invented by world-class application security experts, who recognized early the potential of Generative Pre-trained Transformer (GPT) technology—a type of Large Language Model (LLM) that uses deep learning to produce human-like content—to revolutionize software security. The tool is trained on Veracode’s proprietary knowledge base using supervised learning, unlike other AI tools that are trained on insecure code ‘in the wild.’
In celebration of this milestone, Veracode is offering a trial of Veracode Fix with no initial cost.
Industry News
Docker announced a major expansion of its AI initiative with the upcoming Docker MCP Catalog and Docker MCP Toolkit.
Perforce Software announced the release of its latest platform update for Puppet Enterprise Advanced, designed to streamline DevSecOps practices and fortify enterprise security postures.
Azul announced JVM Inventory, a new feature of Azul Intelligence Cloud designed to address the complexity and risk of migrating off Oracle Java.
LaunchDarkly announced the acquisition of Highlight, a powerful, open source, full-stack application monitoring platform known for its error monitoring, logging, distributed tracing and session replay capabilities.
O’Reilly announced AI Codecon—a groundbreaking virtual conference series dedicated to exploring the rapidly evolving world of AI-assisted software development.
Veracode unveiled new capabilities offering proactive risk mitigation and automated security at enterprise scale.
Snyk launched Snyk API & Web, delivering a dynamic application security testing (DAST) solution designed to meet the growing demands of modern and increasingly AI-powered software development.
Check Point® Software Technologies Ltd. announced that it has ranked as a Leader and the only Outperformer for its Check Point Quantum Security Solutions in GigaOm’s latest Radar for Enterprise Firewall report.
Postman announced new releases designed to help organizations build APIs faster, more securely, and with less friction.
SnapLogic announced AgentCreator 3.0, an evolution in agentic AI technology that eliminates the complexity of enterprise AI adoption.
GitLab announced the general availability of GitLab Duo with Amazon Q.
Perforce Software and Liquibase announced a strategic partnership to enhance secure and compliant database change management for DevOps teams.
Spacelift announced the launch of Saturnhead AI — an enterprise-grade AI assistant that slashes DevOps troubleshooting time by transforming complex infrastructure logs into clear, actionable explanations.
CodeSecure and FOSSA announced a strategic partnership and native product integration that enables organizations to eliminate security blindspots associated with both third party and open source code.