https://tamis.app/en/blog/ Plain-language articles on application security, explained simply, then in depth. A new series every week. en https://tamis.app/en/blog/choosing-an-sca-toolhttps://tamis.app/en/blog/choosing-an-sca-toolTue, 06 Oct 2026 08:00:00 +0000SCACompare SCA tools on your artifacts: a trial protocol, hidden dependencies, false positives, reachability, exports and real operating costs. https://tamis.app/en/blog/choosing-a-sast-toolhttps://tamis.app/en/blog/choosing-a-sast-toolTue, 06 Oct 2026 08:00:00 +0000SASTCompare SAST engines on your code: a repeatable trial, precision and recall, five decisive tests, integration and the real cost of adoption. https://tamis.app/en/blog/sca-explainedhttps://tamis.app/en/blog/sca-explainedSun, 04 Oct 2026 08:00:00 +0000SCAThe code we write is only the tip of the iceberg. Russian-doll dependencies, recent attacks (xz, chalk, OpenAI) and what an SCA tool does, in plain language. https://tamis.app/en/blog/sca-deep-divehttps://tamis.app/en/blog/sca-deep-diveSun, 04 Oct 2026 08:00:00 +0000SCAFive levels of analysis on one fictional application, then under the hood: rebuilding the tree, CPE versus purl, comparing versions, reachability, EPSS, VEX and the Cyber Resilience Act. https://tamis.app/en/blog/sast-explainedhttps://tamis.app/en/blog/sast-explainedSun, 04 Oct 2026 08:00:00 +0000SASTThe over-obedient barista, twenty-five years of SQL injection, and how SAST tracks data to dangerous operations. With a game to take over the counter. https://tamis.app/en/blog/sast-deep-divehttps://tamis.app/en/blog/sast-deep-diveSun, 04 Oct 2026 08:00:00 +0000SASTA lab with five configurations, then the engine: AST, SSA, taint sensitivities, Rice's theorem, what tools detect and what they miss.