Suggestions
Tom Gleason
VP Customer Solutions @ Endor Labs 🐻🧪
Tom Gleason is the Vice President of Customer Solutions at Endor Labs, a company focused on software supply chain security. He is recognized for his expertise in building and leading technically-oriented customer teams, leveraging his extensive background in cybersecurity and application security. Prior to joining Endor Labs in February 2024, Gleason held significant roles at notable companies including Snyk, Akamai Technologies, and Palo Alto Networks, where he contributed to enhancing customer engagement and solutions architecture.12
Professional Background
- Endor Labs: As VP of Customer Solutions, Gleason leads efforts to empower developers by ensuring that software supply chains are secure while facilitating faster code deployment. His approach emphasizes understanding customer needs and delivering actionable solutions in the realm of application security.13
- Snyk: Head of Americas Solutions Engineering, where he focused on making application security more accessible for enterprise developers.
- Akamai Technologies: Team Lead and Engagement Manager, contributing to client solutions in a fast-paced environment.
- Palo Alto Networks: Senior Director of Solutions Architecture, further solidifying his expertise in cybersecurity.12
Personal Interests
Outside of his professional endeavors, Tom Gleason is described as a security enthusiast who enjoys activities such as reading, puzzles, and cooking. He values family time and resides in Rhode Island.1
Gleason's career reflects a commitment to improving the intersection of security and development processes, making him a key figure in addressing contemporary challenges in software supply chain management.
Highlights
🤔Thoughtful Thursdays: Simplifying OSS Upgrades
“I love upgrading OSS packages,” said no engineer, ever.
The uncertainty of what will break next is a unique form of torture. Whether it’s due to a security bug or a deprecated package, it’s a nightmare. 🧟♂️
At Endor Labs, we understand this struggle. We believe you shouldn’t have to endure the endless cycle of test > fail > test > pass > break > fix > test > 🤞. That’s why we’ve developed two key features to simplify OSS dependency upgrades: Upgrade Impact Analysis and Endor Magic Patches.
Here’s how we help: • 📌 Confirm vulnerabilities are reachable by your application code. • 🔍 Identify which package upgrades will fix the most vulnerabilities. • 💔 Analyze upgrades for application-specific breaking changes. • ❤️🩹 Upgrade without guessing what will break. • 🩹 Patch only what’s vulnerable if the upgrade is too challenging.
Read more: https://lnkd.in/eMmV83YM #DevOps #DevSecOps #SCA #Security #Upgrades #Remediation
Tinkering Tuesday's - Transitive Dependencies (Since Meghan Mahoney has a Monopoly on Mondays!!)
Have you ever wondered about the hidden layers of dependencies in your software projects? 🌐
Understanding your transitive dependencies is crucial for maintaining secure and efficient code. These indirect dependencies can sometimes introduce vulnerabilities or bloat your project.
This #TinkeringTuesday, explore your dependencies using your package managers. There are plenty of options for all different types of ecosystems. If you're in the JavaScript/NPM world, it is as simple:
npm list --all
💪If that is too easy, remember that this is just for the NPM ecosystem and doesn’t account for everything, like phantom dependencies. So check out our blog post on the topic:
https://lnkd.in/eRNGnuTK
🐻🧪
#SoftwareDevelopment #OpenSource #Dependencies #CyberSecurity #DevOps #JavaScript #NPM
