Average Ratings 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

No User Reviews. Be the first to provide a review:

Write a Review

Description

CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.

Description

MergeBase is changing the way software supply chain protection is done. It is a fully-featured, developer-oriented SCA platform that has the lowest number of false positives. It also offers complete DevOps coverage, from coding to building to deployment and run-time. MergeBase accurately detects and reports vulnerabilities throughout the build and deployment process. It has very low false positive rates. You can accelerate your development by getting the best upgrade path immediately and applying it automatically with "AutoPatching". The industry's most advanced developer guidance. MergeBase empowers security teams and developers to quickly identify and reduce real risks in open-source software. A summary of your applications. Detail breakdown. Learn about the risks associated with the underlying components. Find out more about the vulnerability. Notification system. Generate SBOM reports.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

GitHub Yes 
GitLab Yes 
Aqua Yes 
Bitbucket No 
Contrast Security Yes 
CybeDefend Yes 
Cybeats Yes 
Cybellum Yes 
Endor Labs Yes 
FOSSA Yes 
GO hourly No 
Google Yes 
JSON Yes 
Java No 
Jira No 
MergeBase Yes 
Ruby No 
Snyk Yes 
Veracode Yes 
XML Yes 

Integrations

GitHub Yes 
GitLab Yes 
Aqua No 
Bitbucket Yes 
Contrast Security No 
CybeDefend No 
Cybeats No 
Cybellum No 
Endor Labs No 
FOSSA No 
GO hourly Yes 
Google No 
JSON No 
Java Yes 
Jira Yes 
MergeBase No 
Ruby Yes 
Snyk No 
Veracode No 
XML No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

$380 per month
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

CycloneDX

Website

cyclonedx.org

Vendor Details

Company Name

MergeBase

Founded

2018

Country

Canada

Website

mergebase.com/sca-platform/

Alternatives

Alternatives

Kiuwan Code Security Reviews

Kiuwan Code Security

Kiuwan
4.5 out of 5 stars
CodeSentry Reviews

CodeSentry

CodeSecure