Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.

Description

Finite State offers risk management solutions for the software supply chain, which includes comprehensive software composition analysis (SCA) and software bill of materials (SBOMs) for the connected world. Through its end-to-end SBOM solutions, Finite State empowers Product Security teams to comply with regulatory, customer, and security requirements. Its binary SCA is top-notch, providing visibility into third-party software and enabling Product Security teams to assess their risks in context and improve vulnerability detection. With visibility, scalability, and speed, Finite State integrates data from all security tools into a unified dashboard, providing maximum visibility for Product Security teams.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Anchore Yes 
Arnica Yes 
Bytesafe Yes 
Checkmarx Yes 
Checkov Yes 
Cisco Identity Services Engine (ISE) No 
Codenotary Yes 
Contrast Security Yes 
CycloneDX No 
Endor Labs Yes 
FOSSA Yes 
GitLab Yes 
Google Yes 
JFrog Yes 
Mend.io Yes 
OWASP Threat Dragon Yes 
ServiceNow Yes 
Snyk Yes 
Veracode Yes 
Xygeni Yes 

Integrations

Anchore No 
Arnica No 
Bytesafe No 
Checkmarx No 
Checkov No 
Cisco Identity Services Engine (ISE) Yes 
Codenotary No 
Contrast Security No 
CycloneDX Yes 
Endor Labs No 
FOSSA No 
GitLab No 
Google No 
JFrog No 
Mend.io No 
OWASP Threat Dragon No 
ServiceNow No 
Snyk No 
Veracode No 
Xygeni No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

CycloneDX

Website

cyclonedx.org

Vendor Details

Company Name

Finite State

Founded

2017

Country

United States

Website

finitestate.io/products/finite-state-platform/

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection Yes 
Vulnerability Remediation No 

Static Application Security Testing (SAST)

Application Security Yes 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning Yes 
Vulnerability Scanning Yes 

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning No 
Patch Management Yes 
Policy Management No 
Prioritization Yes 
Risk Management Yes 
Vulnerability Assessment Yes 
Web Scanning No 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning Yes 
Compliance Monitoring Yes 
Continuous Monitoring Yes 
Defect Tracking Yes 
Interactive Scanning No 
Logging and Reporting Yes 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis Yes 
Threat Intelligence Yes 
Web Inspection No 

Alternatives

Alternatives

CodeSentry Reviews

CodeSentry

CodeSecure
Tenable One Reviews

Tenable One

Tenable