Hub

Sign-in

Hub

Sign-in

Blog

SDLC Security Research for the AI-Coding Era

Practical guidance on stolen keys and tokens, coding agents, CI/CD runners, GitHub/GitLab Zero Trust, and compliance without MDM.

Insights

Shadow AI Has a Good Reason: Securing OpenClaw and Hermes While Accelerating Humans

Frank Lyonnet

Jul 9, 2026

Insights

Intent Divergence, Formalised: EDAMAME's Foundational Research with CNRS Is Now Public

Frank Lyonnet

Jul 2, 2026

Stories

How we run EDAMAME's go-to-market with a self-improving AI operator

Frank Lyonnet

Jun 22, 2026

Insights

Make the stolen token useless: bind access to the machine, not the credential

Frank Lyonnet

Jun 16, 2026

Insights

Agentic Posture Visibility: Know Every Agent Before You Trust It

Frank Lyonnet

Jun 11, 2026

Insights

Zero Trust for AI Agents: Anthropic Drew the Map. Here's the Runtime Layer That Proves It Holds.

Frank Lyonnet

Jun 2, 2026

Insights

SOC 2 for BYOD, BYOPC, contractors, developers and coding agents — without legacy MDM

Frank Lyonnet

May 24, 2026

Insights

GitHub's poisoned VS Code extension breach was an endpoint-trust problem

Frank Lyonnet

May 20, 2026

Engineering

TanStack, Mistral AI, UiPath, OpenSearch, Bitwarden CLI: When Trusted Publishing and SLSA Both Verify, and the Publish Is Still Malicious

Minh Anh Day

May 12, 2026

Insights

The SDLC trust layer: what every enterprise security review is now asking about — and the layer built to answer it

Frank Lyonnet

Apr 29, 2026

Insights

Enterprise endpoint trust without MDM — the developer-first posture layer, now adversarially validated

Frank Lyonnet

Apr 29, 2026

Engineering

Another Supply Chain Attack, Another Stolen Credential — Can You Beat Our Runtime Detection?

Frank Lyonnet

Apr 22, 2026

Insights

Don't Throw MCP Under the Bus: The OX Disclosure Is a Provider Problem, Not a Protocol Problem

Frank Lyonnet

Apr 18, 2026

Insights

The patch cycle is broken. Here's what actually comes next.

Minh Anh Day

Apr 9, 2026

Engineering

Axios Compromised: 100 Million Weekly Downloads, a Hidden RAT, and Why the Chain Reaction Won't Stop

Frank Lyonnet

Mar 31, 2026

Engineering

From Trivy to LiteLLM: Why Runtime Detection Is the Practical Way to Find the Fallout

Minh Anh Day

Mar 27, 2026

News

GitHub Audit in EDAMAME Hub: A Low-Friction First Step to Zero Trust for GitHub

Frank Lyonnet

Mar 19, 2026

Insights

2 real attacks every individual developer should model with a Personal CISO

Frank Lyonnet

Feb 12, 2026

Insights

Tokens didn’t become more dangerous in 2026 — we just finally accepted what they always were

Frank Lyonnet

Feb 7, 2026

News

EDAMAME Agents 1.0: User-Up Security, Finally Unlocked Through AI

Frank Lyonnet

Jan 28, 2026

Insights

Dear Security Posture, We Need to Talk

Frank Lyonnet

Nov 14, 2025

Insights

Building Real Security for GitHub Enterprise: Lessons from Air-Gapped Systems and Zero Trust

Frank Lyonnet

Oct 31, 2025

News

Announcing EDAMAME Security Final Beta – The All-in-One Multiplatform Rust-Powered Endpoint Security Tool for Devs

Frank Lyonnet

Oct 13, 2025

Tutorials

Shield Self Hosted CI from Unprotected Endpoints with EDAMAME + Tailscale / NetBird

Frank Lyonnet

Aug 5, 2025

Insights

The Token Loophole: Why Even the Newest Device‑Trust Solutions Still Miss a Critical SDLC Gap

Frank Lyonnet

Jul 10, 2025

Business

Case Study: PPE analytics Secures Its SDLC with Developer First Zero Trust

Frank Lyonnet

May 22, 2025

News

EDAMAME × Vanta: Endpoint Compliance — No MDM Required

Frank Lyonnet

Apr 30, 2025

Engineering

GitHub Actions Supply Chain Attack: What Happened and How We Detected It

Frank Lyonnet

Mar 17, 2025

Stories

Tales from the Front Lines: How Engineers Bypassed the Company Endpoint Security

Frank Lyonnet

Dec 12, 2024

Insights

Decentralizing Cybersecurity: A Vision for the Future of SDLC Endpoint Security

Frank Lyonnet

Dec 11, 2024

Insights

Achieving SOC 2 Compliance Across the Software Development Life Cycle without MDM/UEM

Frank Lyonnet

Nov 22, 2024

Insights

Achieving ISO/IEC 27001 Compliance Across the Software Development Life Cycle without MDM/UEM

Frank Lyonnet

Nov 21, 2024

Insights

Securing Developer Machines Without Compromising Productivity

Frank Lyonnet

Oct 31, 2024

Insights

Enhancing CI/CD Pipeline Security with Hardening, Network Auditing, and Zero Trust

Frank Lyonnet

Oct 25, 2024

Insights

Journalists Are Like Developers: Guardians of Confidential Data and Critical Publications

Frank Lyonnet

Oct 22, 2024

Insights

Why the SDLC is a Critical Component of Fintech ICT Under DORA

Frank Lyonnet

Oct 5, 2024

Stories

How We Secured Our GitHub Enterprise and Forgot It Was There—Eating Our Own Dog Food for One Month

Frank Lyonnet

Sep 9, 2024

Business

How EDAMAME Revolutionizes Network Access for Guest LAN/WiFi Users

Frank Lyonnet

May 7, 2024

Business

Tightening Defenses Against Supply Chain Attacks with GitHub Enterprise and EDAMAME Security

Frank Lyonnet

Jan 4, 2024

Engineering

Building EDAMAME Security: Our Journey with Flutter and Rust

Frank Lyonnet

Dec 19, 2023

Insights

Endpoint Security: The Power of a User-Centric Approach

Frank Lyonnet

Oct 3, 2023

Insights

Personal Macs Can Be Safer Than Corporate PCs

Frank Lyonnet

Sep 12, 2023

Insights

Navigating the Complexities of Contractors Using Their Own Devices

Frank Lyonnet

Aug 28, 2023