Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Container images are made up of various layers and software packages that can be at risk of vulnerabilities, which may jeopardize the safety of both containers and applications. These security risks necessitate proactive measures, and Docker Scout serves as an effective tool to bolster the security of your software supply chain. By examining your images, Docker Scout creates a detailed inventory of the components, referred to as a Software Bill of Materials (SBOM). This SBOM is then compared against a constantly updated database of vulnerabilities to identify potential security flaws. Operating as an independent service, Docker Scout can be accessed through Docker Desktop, Docker Hub, the Docker CLI, and the Docker Scout Dashboard. Furthermore, it supports integrations with external systems, including container registries and CI platforms. Take the opportunity to uncover and analyze the structure of your images, ensuring that your artifacts conform to the best practices of the supply chain. By leveraging Docker Scout, you can maintain a robust defense against emerging threats in your software environment.
Description
Threat Detective is specialized software designed for managing SBOMs and vulnerabilities specifically tailored for teams in the medical device sector.
Transform your SBOM and vulnerability assessments into cybersecurity evidence that is ready for submission, while ensuring that this evidence remains up-to-date through ongoing post-market surveillance.
Threat Detective empowers teams to:
* Import CycloneDX and SPDX SBOMs
* Verify the contents and essential components of SBOMs
* Detect vulnerabilities from a variety of advisory sources
* Rank findings based on CVSS, EPSS, and CISA KEV
* Record exploitability, remediation, and mitigation strategies
* Publish VEX
* Create documentation for FDA, EU MDR, and UK regulatory processes
* Continuously track each active device and software version for newly revealed vulnerabilities
Designed specifically for medical device manufacturers, Threat Detective modernizes traditional spreadsheet-based vulnerability management by offering a streamlined, auditable framework for both premarket review and continuous post-market monitoring, ensuring compliance and enhanced security throughout the product lifecycle. This innovative approach not only increases efficiency but also elevates the standard of care within the industry.
API Access
Has API
No
API Access
Has API
No
Screenshots View All
No images available
Integrations
Amazon Elastic Container Registry (ECR)
Yes
Azure Container Registry
Yes
Azure DevOps Server
Yes
CircleCI
Yes
Devtron
Yes
Docker
Yes
GitHub
Yes
GitLab
Yes
JFrog Artifactory
Yes
Jenkins
Yes
Integrations
Amazon Elastic Container Registry (ECR)
No
Azure Container Registry
No
Azure DevOps Server
No
CircleCI
No
Devtron
No
Docker
No
GitHub
No
GitLab
No
JFrog Artifactory
No
Jenkins
No
Pricing Details
$5 per month
Free Trial
No
Free Version
Yes
Pricing Details
$189/month/project
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
No
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Docker
Founded
2013
Country
United States
Website
docs.docker.com/scout/
Vendor Details
Company Name
Threat Detective Ltd
Founded
2025
Country
United Kingdom
Website
threatdetectivehq.com
Product Features
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No