Product Listings
Mend.io, previously known as WhiteSource, focusses on building high-grade Application Security (AppSec) programs which aim to mitigate risk while accelerating development. Leveraging cutting-edge automated technology, the company offers protection against threats associated with supply chains, malicious package attacks, and vulnerabilities found in both open source and custom code. Additionally, Mend.io addresses potential risks linked to open-source licenses. The firm is recognized for its record of satisfying complex, large-scale application security demands and is therefore chosen by numerous demanding development and security teams across the globe. Additionally, Mend.io administrates the automated dependency update project, Renovate.
Veracode is a software security firm focused on identifying flaws and vulnerabilities across all stages of the software development lifecycle. The foundation of Veracode's approach lies in its Software Security Platform, which uses advanced AI algorithms trained on vast datasets of code. This allows for faster and more precise identification and rectification of security flaws. Veracode's mission is to evolve the concept of software security, ensuring it stays aligned with the dynamic needs of today's software development processes.
Black Duck builds trust in software by enabling organizations to manage application security, quality, and compliance risks at the speed their business demands. Black Duck solutions help developers to secure code as fast as they write it; development and DevSecOps teams to automate testing within development pipelines without compromising velocity; and security teams to proactively manage risk and focus remediation efforts on what matters most. With Black Duck, organizations can transform the way they build and deliver software, aligning people, processes, and technology to intelligently address software risks across their portfolio and at all stages of the application lifecycle.
Snyk specializes in providing security solutions that enable security teams and developers to work together to reduce application risk and speed software delivery. By integrating application security into developers' workflows, Snyk aims to help organizations secure their applications from code creation to cloud deployment. The end-to-end view of applications gives developers and security the shared perspective to improve security posture, while enhancing developers' productivity, preventing issues early in the development cycle, and allowing for the fastest response when security events like zero days occur.
GitLab is a comprehensive AI-powered DevSecOps platform for software innovation. As a software delivery platform for development, security, and operations teams, GitLab brings security and compliance to AI-powered workflows throughout the software delivery lifecycle, helping customers deliver secure software faster. GitLab Duo, the company’s suite of AI capabilities, improves team collaboration and reduces the security and compliance risks of AI adoption by bringing the entire software development lifecycle into a single AI-powered application that is privacy-first.
With GitLab, customers can visualize their end-to-end value streams, boost developer productivity with out-of-the-box analytics, and secure their software supply chain with SAST, DAST, secret detection, container scanning, and API testing. It enables organizations to increase developer productivity, improve operational efficiency, and accelerate cloud transformations to maximize the overall return on software development.
Tenable is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business risk for more than 44,000 customers around the globe.
Timesys steers the industry as a seasoned authority in the realm of open-source software security, development apparatus, and engineering amenities, primarily concentrated on the embedded software market. They offer a comprehensive device security solution—Vigiles, which enables developers to implement and maintain strong security throughout product lifecycles. This service provides real-time vulnerability monitoring and management. The company's primary objective is assisting OEMs, ODMS, and design houses in reducing development costs and expediting the time-to-market for BSPs and devices, HMI/UX, security, and IoT systems and applications. They do this by leveraging embedded Linux, Android, FreeRTOS, and various other open-source solutions. Founded in 1996, Timesys has its main office in Pittsburgh, PA, with other branches spread around Elk Grove, CA; Chyby, Poland; and Chennai Coimbatore, India.
FOSSA is an organization that provides support to software companies, revolutionizing their approach towards their code. FOSSA focuses on laying the groundwork that enables modern teams to effectively incorporate open source into their operations.
The primary product of FOSSA assists these teams in tracking the open source elements incorporated into their code. It also automates the process of license scanning and compliance. FOSSA's tools have therefore become a crucial element for software shipping. Software industry participants normally utilize code that interacts with FOSSA. The organization has financially supported its operations through venture capital funding.
Arnica is a company that focuses on mitigating software supply chain attacks which have been escalating for the past five years. By recognizing that the software supply chain is a crucial factor in an organization's security structure, they are striving to safeguard developers, code, and developed products. Arnica integrates across the software supply chain, providing the context, prioritization, ownership, and actionable insights necessary to proactively mitigate risks. The company offers complete reports around code risk, excessive permissions, third-party dependencies with low reputation, code repository misconfigurations, and unusual developer behavior. Adopting a Pipelineless approach, Arnica interacts with developers in real time to prevent new risks from infiltrating the source code. Concurrently, it aids in resolving the risk backlog. This tactful approach removes potential threats in a faultless and unashamed manner.
Sonatype, a 15-year-old company, is primarily focused on the management of open source software development. Initially, they contributed to Apache Maven. Later, they expanded to support Central, which is known as the world's largest repository of open source components. They also developed Sonatype Nexus Repository, widely used for managing software repositories. With the surge in the volume and variety of open source libraries, the company understood the potential risks like security vulnerabilities and licensing issues, if not managed properly. Thus, Sonatype invests in machine learning, artificial intelligence and human expertise to acquire extensive knowledge about the quality of open source. They create products that provide curated intelligence, assisting organizations to make informed decisions, accelerate innovative ideas and ensure the high-quality standard of their open source components.
Flexera delivers Saas-based IT management solutions that enable enterprises to accelerate digital transformation and multiply the value of their technical investments. We help organizations inform their IT with definitive visibility into complex hybrid IT ecosystems, providing unparalleled IT insights that allow them to seize technology opportunities. And we help them transform their IT with tools that deliver actionable intelligence across an ever-increasing range of dimensions to effectively manage, govern and optimize their hybrid IT estate. More than 50,000 customers subscribe to our technology value optimization solutions, delivered by 1,300+ passionate team members worldwide.
Mission-critical, custom-built applications are becoming incredibly difficult to adapt to the ever-evolving needs of the business, to the point where it’s hardly possible for humans to keep up.
CAST technology automatically ‘understands’ custom-built software systems and provides insights into their inner workings, with MRI-like precision. It augments the human capacity to help software owners maintain, enhance, modernize these applications with speed and confidence.
Resulting from well over $200 million of R&D, CAST software is used and promoted by hundreds of companies, top management consultancies, the 10 largest system integrators, and all three major cloud vendors.
Checkmarx helps the world’s largest enterprises get ahead of application risk without slowing down development. We end the guesswork by identifying the most critical issues to fix and give AppSec the tools they need, all while letting developers work the way they want. From DevSecOps to developer experience, security and development teams can now work better together.
Black Duck builds trust in software by enabling organizations to manage application security, quality, and compliance risks at the speed their business demands. Black Duck solutions help developers to secure code as fast as they write it; development and DevSecOps teams to automate testing within development pipelines without compromising velocity; and security teams to proactively manage risk and focus remediation efforts on what matters most. With Black Duck, organizations can transform the way they build and deliver software, aligning people, processes, and technology to intelligently address software risks across their portfolio and at all stages of the application lifecycle.
CloudDefense ACS is a company that specializes in protection against cyber-attacks using patented technology. The firm addresses the business problem of information security by offering a NextGen Intelligent platform that incorporates advanced Artificial Intelligence and Machine Learning capabilities. This technology endeavors not only to secure cloud infrastructures, but also to ensure continuous monitoring and regulatory compliance. The company, which is rapidly growing, has significant experience in safeguarding the applications and cloud infrastructures of globally recognized organizations.
Contrast Security's Runtime Application Security solutions embed code analysis and attack prevention directly into the software development lifecycle. Patented instrumentation provides integrated and comprehensive security observability that delivers accurate assessment and continuous protection. The Contrast Runtime Security Platform enables powerful Application Security Testing and Application Detection and Response, allowing developers, AppSec teams, and SecOps teams to protect and defend their applications against an evolving threat landscape.
DeepSource is a code health platform that gives organizations all the tools they need to write maintainable and secure code to improve their software's stability and increase developer velocity.
JFrog is on a mission to create a world of software delivered without friction from developer to device. Driven by a “Liquid Software” vision, the JFrog Software Supply Chain Platform is a single system of record that powers organizations to build, manage, and distribute software quickly and securely, ensuring it is available, traceable, and tamper-proof. The integrated security features also help identify, protect, and remediate against threats and vulnerabilities. JFrog’s hybrid, universal, multi-cloud platform is available as both self-hosted and SaaS services across major cloud service providers. Millions of users and 7K+ customers worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation.
Ossisto is a company that offers Virtual Assistance services, helping individuals achieve more independence by managing time-consuming tasks. The team consists of experts in various fields who are equipped to handle a wide range of responsibilities. Ossisto primarily provides Professional Administrative Support for entrepreneurs and small business owners but also caters to industry leaders. The services extend beyond basic administrative tasks to include specialties in areas such as IT, web design, web hosting, market research, and digital marketing. Ossisto's comprehensive virtual assistance serves as a solution to the demands that come with running a business or managing personal tasks.
Qwiet AI lets you secure your code from the start, so you can build with confidence. Our fast and accurate SAST scanner creates a code property graph (CPG) that preserves context and allows an understanding of how syntax can be exploited without control via data flow, and also leverages our proprietary AI/ML engine to detect vulnerabilities before attackers can. Further, the platform provides SBOM analysis, SCA, OSS license analysis, and secrets detection, and it scans the entirety of the containers used by your applications, providing you with a quick and accurate view of the risks both inside and outside your code. Moreover, it does all of this in a single scan that takes only a minute or two. The platform is a native SaaS product that never sends your source code to the cloud.