Software Composition Analysis

Organizations worldwide use Black Duck’s industry-leading products to automate the processes of securing and managing open source software, eliminating the pain related to security vulnerabilities,…

CAST is an independent software vendor that is a pioneer and world leader in Software Analysis and Measurement (SAM). With more than $120 million cumulative investment in R&D, CAST provides the most…

Checkmarx, founded in 2006, is a leader in application security solutions, having developed the first platform for true Source Code Analysis (SCA) with its marquee solution: Static Application…

Flexera helps executives succeed at what once seemed impossible: getting clarity into, and full control of, their company’s technology “black hole.” From on-premises to the cloud, Flexera helps…

FOSSA's flagship product helps teams track the open source used in their code and automate license scanning and compliance. Since then, over 3000 open source projects (Kubernetes, Webpack, Terraform,…

GitLab is a company based on the GitLab open-source project, helping developers collaborate on code to build great things and ship on time. They are an active participant in their global community of…

JFrog's mission is to provide better technologies and tools for the everyday use and to increase the effectiveness of software development. JFrog's core values are based on non-compromising…

NTT Application Security is driving the future of application security. For nearly 20 years, organizations around the globe have relied on NTT Application Security to secure their business’ digital…

Revenera helps product executives build better products, accelerate their time to market and monetize what matters. Revenera’s leading solutions help software and technology companies drive top line…

Snyk mission is to help developers use open source code and stay secure. Snyk’s unique developer focused product enables developers and enterprise security to continuously find & fix vulnerable…

The Sonatype journey started 10 years ago, just as the concept of “open source” software development was gaining steam. From our humble beginning as core contributors to Apache Maven, to supporting…

Synopsys offers the most comprehensive solution for building integrity—security and quality—into your SDLC and supply chain. We’ve united leading testing technologies, automated analysis, and experts…

Veracode delivers the most widely used cloud-based platform for securing web, mobile, legacy and third-party enterprise applications. By identifying critical application-layer threats before…

WhiteSource is the leading solution for agile open source security and license compliance management. It integrates with your development environments and DevOps pipeline to detect open source…