Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.
Description
Finite State offers risk management solutions for the software supply chain, which includes comprehensive software composition analysis (SCA) and software bill of materials (SBOMs) for the connected world. Through its end-to-end SBOM solutions, Finite State empowers Product Security teams to comply with regulatory, customer, and security requirements. Its binary SCA is top-notch, providing visibility into third-party software and enabling Product Security teams to assess their risks in context and improve vulnerability detection. With visibility, scalability, and speed, Finite State integrates data from all security tools into a unified dashboard, providing maximum visibility for Product Security teams.
API Access
Has API
No
API Access
Has API
Yes
Integrations
Anchore
Yes
Arnica
Yes
Bytesafe
Yes
Checkmarx
Yes
Checkov
Yes
Cisco Identity Services Engine (ISE)
No
Codenotary
Yes
Contrast Security
Yes
CycloneDX
No
Endor Labs
Yes
Integrations
Anchore
No
Arnica
No
Bytesafe
No
Checkmarx
No
Checkov
No
Cisco Identity Services Engine (ISE)
Yes
Codenotary
No
Contrast Security
No
CycloneDX
Yes
Endor Labs
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
No
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
CycloneDX
Website
cyclonedx.org
Vendor Details
Company Name
Finite State
Founded
2017
Country
United States
Website
finitestate.io/products/finite-state-platform/
Product Features
Product Features
Application Security
Analytics / Reporting
No
Open Source Component Monitoring
Yes
Source Code Analysis
Yes
Third-Party Tools Integration
No
Training Resources
No
Vulnerability Detection
Yes
Vulnerability Remediation
No
Static Application Security Testing (SAST)
Application Security
Yes
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
Yes
Vulnerability Scanning
Yes
Vulnerability Management
Asset Discovery
No
Asset Tagging
No
Network Scanning
No
Patch Management
Yes
Policy Management
No
Prioritization
Yes
Risk Management
Yes
Vulnerability Assessment
Yes
Web Scanning
No
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
Yes
Compliance Monitoring
Yes
Continuous Monitoring
Yes
Defect Tracking
Yes
Interactive Scanning
No
Logging and Reporting
Yes
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
Yes
Threat Intelligence
Yes
Web Inspection
No