Sonatype Repository Firewall
Automate your software supply chain security by blocking malicious open source at the door. Sonatype Repository Firewall is a tool that helps you to block malicious open source components in your software supply chain. It integrates with your existing development workflow and provides real-time visibility into your open source components. It also helps you to enforce policy at scale and manage vulnerability risks. It is a part of the Sonatype platform that provides a comprehensive solution for software supply chain security. It is designed to work with a wide range of tools, languages, and packages. It is a must-have tool for any organization that wants to ensure the security of its software supply chain.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Tool to identify and understand code-injection vulnerabilities in Windows 7 UAC whitelist system.
Next-generation Linux exploit suggester with improved features for finding privilege escalation vulnerabilities.
A comprehensive open dictionary of fault injection patterns and predictable resource locations for dynamic application security testing
An Open Source supply chain security and auditing tool that tracks projects and dependencies, monitoring for vulnerabilities and issues.
Vulnerability scanner for Linux/FreeBSD, written in Go, agent-less, informs users of vulnerabilities related to the system and affected servers.
tfsec is being replaced by Trivy, a more comprehensive open-source security solution
An open source project for static analysis of vulnerabilities in application containers
A virtual machine with numerous security vulnerabilities for testing exploits with Metasploit.
A tool that automatically audits website security by crawling an entire website and identifying vulnerabilities
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.