Blog | Finite State

Blog

The Finite State Blog

Practical insights and articles from our SMEs to help product security teams cut triage noise, fix what matters faster, and deliver audit-ready proof to customers and regulators.

25 results

SBOM ManagementProduct Security+1

Binary Software Composition Analysis (SCA): What It Is and How It Works

If traditional AppSec tools fall short in securing your connected products, how do you mitigate vulnerabilities and ship your products with confidence...

Larry PesceFEBRUARY 8, 2026

Software Composition Analysis

What Is Software Composition Analysis (SCA)? A Practical Guide

Unlock the power of SCA in your software development lifecycle. Our in-depth guide explores best practices to ensure secure, compliant coding.

Larry PesceSEPTEMBER 14, 2025

Software Composition AnalysisProduct Updates

Black Duck vs Finite State: What’s the Best Software Composition Analysis (SCA) Tool?

Discover the key differences between Black Duck & Finite State in this comprehensive comparison to help you choose the best software security solution...

Finite State TeamAUGUST 19, 2025

Software Supply Chain SecurityIoT & OT+1

Finite State vs. Mend.io: Choosing the Right Tool for Product Security and Compliance

Compare Mend.io vs Finite State: See why embedded device manufacturers choose Finite State for firmware SCA, SBOMs, and compliance-ready security.

Finite State TeamMAY 29, 2025

Vulnerability ManagementProduct Security+1

The Hidden Costs of Free Vulnerability Scanners

Discover the hidden costs of free SCA tools. Learn their pros, cons, and why investing in robust vulnerability scanners is critical for IoT security.

Finite State TeamJANUARY 24, 2025

Vulnerability ManagementSoftware Composition Analysis

Industry Report: The True Costs of False Positives in Software Security

Discover how false positives in software security waste time and resources. Learn from our survey of professionals and see how Finite State SCA can he...

Oscar van der MeerAUGUST 20, 2024

Software Composition Analysis

Shift Left Security: Protect Your Dev Life Cycle with Software Composition Analysis

A secure software product comes from a secure development process—here’s how to shift left with an SCA tool like Finite State.

Finite State TeamAUGUST 17, 2024

Software Composition Analysis

New Jenkins CI/CD Plugins!

Finite State has new Jenkins CI/CD Plugins!

Ryan OwenAUGUST 7, 2024

Software Composition Analysis

How to Identify Vulnerabilities in Open Source Code

Learn about open-source software vulnerabilities, inc. buffer overflows, SQL injections, XSS, & insecure dependencies, & identification methods.

Doc McConnell JULY 30, 2024

Software Composition Analysis

The Complete Guide to Open Source Licenses

Choosing the right open-source license is vital as it affects legal protection, compliance, community engagement, & the project's long-term viability.

Doc McConnell JULY 18, 2024

Software Composition Analysis

Introducing Rust Language Support for Finite State’s SCA Tool

Finite State now supports Rust, offering an SCA tool that enables developers to scan and secure applications built using the Rust programming language...

Finite State TeamAPRIL 8, 2024

Software Composition Analysis

Finite State’s SCA Tool Introduces Dart Language Support

Finite State now supports Dart, offering an SCA tool for Dart & Flutter apps. Secure your mobile applications with accurate scanning & low false posit...

Finite State TeamAPRIL 4, 2024