Blogs by Gal Sapir

When Vulnerabilities Come From Images You Don’t Own
Runtime visibility for third-party container images and the missing context for ownership and remediation.

Securing Vibe Coding: Security for AI-Generated Development
AI coding assistants are reshaping how software is written. Developers increasingly rely on models to read repositories and generate or modify files directly inside local projects, often introducing dependencies, configuration changes and large sections of application logic.

Runtime Visibility for Windows Applications
Cloud telemetry reveals where a workload is running and the context of the infrastructure. AppSec needs a different layer of evidence: runtime observability that helps determine whether a vulnerability is truly exploitable based on how the application behaves within its environment.

