SaaS platform for software supply chain monitoring across IT, IoT, and OT.
aDolus FACT Certificate Validation
Application security posture management.
Apiiro DeliverApiiro SSCS
Cloud-native application and container security.
Aqua Software Supply Chain Security
Developer-native supply chain security.
Pipelineless Security
Application security and software composition analysis.
ASPM platform for monitoring and hardening app security across SDLC
BoostSecurity Cloud-speed ComplianceBoostSecurity Software Supply Chain Protection
Secure (minimal, zero-CVE) container images.
Chainguard ContainersChainguard LibrariesChainguard OS PackagesChainguard VMsChainguard Zero-CVE Images
Cloud-native artifact mgmt & software supply chain security platform.
Cloudsmith
AI-powered agentic orchestrator for IT automation with MCP, API, and CLI tools
Codenotary Trustcenter
Application security posture management and software supply chain security.
CI/CD SecurityCycode CI/CD Security
Platform for managing 20+ types of publicly trusted digital certificates.
DigiCert Software Trust Manager
SCA & supply chain security platform for vuln detection, SBOM, and autofix.
EdgeBit
Software supply chain and ASPM.
Endor Malware PreventionEndor SBOM & Compliance
Detects foreign adversarial influence in open source software dependencies.
Hunted Labs
illustria, an early-stage Israeli company founded in 2022, provides supply-chain security technology that detects and blocks malicious open-source packages before they reach production.
illustria
App security testing platform with SAST, SCA, secrets detection, and IaC scanning
JFrog AppTrust Application Risk GovernanceJFrog ArtifactoryJFrog Software Supply Chain Platform
Static binary analysis tool detecting behavioral changes in SW supply chain.
Karambit.AI
Tracks, governs, and secures software installs across endpoints and marketplaces.
Koi Platform
Automated CVE patching for open source software components
Kosai CVE-Free Open Source Software
Software supply chain security: a command center over the full transitive dependency graph with PR-embedded review, natural-language queries, and autonomous fixes.
Kusari AgentKusari AutoFixKusari InspectorKusari PlatformKusari Software Supply Chain Security
Integrated portal for open source vulnerability analysis and action plan mgmt.
Labrador SCM
Application security posture and software supply chain.
Legit Security Continuous ComplianceLegit Security Software Supply Chain SecurityLegit Software Supply Chain Security
Software supply chain management and SBOM.
Gold Open SourceLineaje AILineaje Gold Open SourceSBOM360SCA360Third Party Risk Manager
Creates structured inventories of AI system components for transparency & risk mgmt
Manifest Cyber Manifest PlatformManifest SBOMs
Application security (SCA/SAST), formerly WhiteSource.
Minimal, secure container/application images.
Minimus Continuous Vulnerability ScanningMinimus Hardened Container ImagesMinimus Image GalleryMinimus Supply Chain Protection
Myrror Security, an early-stage Israeli company founded in 2022, provides software supply-chain security by comparing source code against compiled binaries to detect tampering.
Myrror Security
Binary code analysis platform for software supply chain security and SBOM gen.
NetRise Platform
Critical-infrastructure and OT protection on the MetaDefender platform: file security/CDR, OT security, industrial firewall, optical diode, and network access control.
OPSWAT MetaDefender Software Supply Chain
Application security posture management and supply chain.
OX SBOMOX Software Supply Chain Security
Patented SCRM tool that scores software supply chain trust via 62 risk factors.
Reliable Energy Analytics SAGSAG-PM (Software Assurance Guardian Point Man)
Software supply chain security and binary/malware analysis.
ReversingLabs Spectra Assure®Spectra Assure
RKVST, an early-stage UK company founded in 2019, provides supply-chain transparency and provenance-tracking technology built on distributed ledger technology.
RKVST
Automated vulnerability patching for open-source libraries and containers
Root Image Drift
SBOM management platform with enrichment, validation, and CI/CD security
Scribe Platform
Policy-driven code signing & CI/CD pipeline integrity platform.
SignPath Zero Trust Software Integrity
Developer-first application security (SCA/SAST).
Software supply chain / dependency security.
Socket
Client-side security for websites against 3rd party vendor attacks
Source Defense Source Defense Detect
CI/CD security platform for GitHub Actions with runtime threat detection
StepSecurity CI/CD Security
Tacit unifies software supply chain security through structured vulnerability management.
Tacit
Application security testing and management.
Veracode Package FirewallVeracode Secure Your Software Supply Chain
Agentless cloud security platform (CNAPP).
Wiz Supply Chain Security
Secures CI/CD pipelines and DevOps workflows against supply chain attacks
Xygeni CI/CD Security
