Cover story
Featured report Security
Apex Field Report
An empirical study of 4,032 machine-generated findings across 612 production web applications and APIs.
Read the featureCantina field notes
Resource center
Practical intelligence for security teams building, reviewing, and operating critical systems.
Cover story
Resource library
32 reports, guides, checklists, playbooks, and webinars. Filter by program area or search by keyword.
No resources match your filters
Try a different program area or clear your search.
Latest research
From the blog
The Loop
Cantina research: Two Node.js Bugs You Should Know About
Two Node.js vulnerabilities can replay SQLite writes or crash workers through oversized DNS responses. See the affected paths, fixed releases, and mitigations.
· Cantina
The Loop
One Emoji Is Enough to Crash Ruby
A single 4-byte emoji overflows a fixed stack buffer in Prism, Ruby's default parser since 3.4. What breaks, why the safety check causes it, and the fix.
· Cantina
The Loop
Cantina Launches Clarion With $16.5M in Total Funding
Cantina launches Clarion alongside $8M in new funding led by Framework Ventures, bringing total funding to $16.5M.
· Cantina
Put these playbooks to work
See how Cantina operationalizes this guidance across your codebase, from continuous review to bug bounties and agentic monitoring.