Software Composition Analysis

Organizations worldwide use Black Duck’s industry-leading products to automate the processes of securing and managing open source software, eliminating the pain related to security vulnerabilities,…

CAST is an independent software vendor that is a pioneer and world leader in Software Analysis and Measurement (SAM). With more than $120 million cumulative investment in R&D, CAST provides the most…

Checkmarx, founded in 2006, is a leader in application security solutions, having developed the first platform for true Source Code Analysis (SCA) with its marquee solution: Static Application…

FOSSA's flagship product helps teams track the open source used in their code and automate license scanning and compliance. Since then, over 3000 open source projects (Kubernetes, Webpack, Terraform,…

GitLab is a company based on the GitLab open-source project, helping developers collaborate on code to build great things and ship on time. They are an active participant in their global community of…

JFrog's mission is to provide better technologies and tools for the everyday use and to increase the effectiveness of software development. JFrog's core values are based on non-compromising…

Mend, formerly known as WhiteSource, is the application security provider of choice for six out of 10 of the world’s most demanding software developers. With Mend, organizations can resolve the…

NTT Application Security is driving the future of application security. For nearly 20 years, organizations around the globe have relied on NTT Application Security to secure their business’ digital…

Revenera helps product executives build better products, accelerate their time to market and monetize what matters. Revenera’s leading solutions help software and technology companies drive top line…

Snyk is the leader in developer security. We empower the world’s developers to build secure applications and equip security teams to meet the demands of the digital world. Our developer-first…

The Sonatype journey started 10 years ago, just as the concept of “open source” software development was gaining steam. From our humble beginning as core contributors to Apache Maven, to supporting…

Synopsys offers the most comprehensive solution for building integrity—security and quality—into your SDLC and supply chain. We’ve united leading testing technologies, automated analysis, and experts…

Veracode delivers the most widely used cloud-based platform for securing web, mobile, legacy and third-party enterprise applications. By identifying critical application-layer threats before…