Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Phylum defends applications at the perimeter of the open-source ecosystem and the tools used to build software. Its automated analysis engine scans third-party code as soon as it’s published into the open-source ecosystem to vet software packages, identify risks, inform users and block attacks. Think of Phylum like a firewall for open-source code. Phylum can be deployed in front of artifact repository managers, integrate directly with package managers or be deployed in CI/CD pipelines. Phylum users benefit from its powerful, automated analysis engine that reports proprietary findings instead of relying on manually curated lists. Phylum uses SAST, heuristics, machine learning and artificial intelligence to detect and report zero-day findings. Users know more risks, sooner and earlier in the development lifecycle for the strongest software supply chain defense. The Phylum policy library allows users to toggle on the blocking of critical vulnerabilities, attacks like typosquats, obfuscated code and dependency confusion, copyleft licenses, and more. Additionally, the flexibility of OPA enables customers to develop incredibly flexible and granular policies that fit their unique needs.
Description
The software industry is increasingly becoming a dominant force in the world. However, if not properly monitored, malicious and advanced individuals could pose a serious threat to this sector. We create open source software that resonates with developers, contributing to a more secure environment for everyone. From enhancing developers' workflows to ensuring a seamless operational workload, we provide comprehensive oversight and traceability. Vulnerabilities in the software supply chain are not a recent issue; they have long been a concern. Both open source and proprietary software have been linked to some of the most notable security breaches throughout the software's evolution. It is imperative to address these vulnerabilities to safeguard the future of technology.
API Access
Has API
API Access
Has API
Integrations
Apache Maven
Azure DevOps Server
Bitbucket
C#
Cargo
GitHub
GitLab
Go
JFrog Artifactory
Java
Integrations
Apache Maven
Azure DevOps Server
Bitbucket
C#
Cargo
GitHub
GitLab
Go
JFrog Artifactory
Java
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Phylum
Founded
2020
Country
United States
Website
phylum.io
Vendor Details
Company Name
Stacklok
Founded
2023
Country
United States
Website
www.stacklok.com
Product Features
Application Security
Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation
DevOps
Approval Workflow
Dashboard
KPIs
Policy Management
Portfolio Management
Prioritization
Release Management
Timeline Management
Troubleshooting Reports
Product Features
Application Security
Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation