AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 25/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 4 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
Agentless CNAPP that maps cloud/SaaS/on-prem assets into a queryable security graph.
Known CVEs (4)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen wh…
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a heap-based buffer overflow in the HE…
Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed S…
SubImage maps cloud, SaaS, and on-prem assets into a queryable security graph, enabling security teams to identify attack paths, misconfigurations, and access risks. The agentless, fully managed platform provides continuous asset inventory and AI‑tailored findings to prioritize remediation.
Strengths
Agentless, zero‑maintenance deployment via secure read‑only API
Fully managed CNAPP built on an open‑core security graph
Continuous asset inventory across cloud, SaaS, and on‑prem environments
Queryable graph enables attack‑path and risk prioritization
Flexible integrations and open APIs for SIEM, SOAR, and ticketing
Materials
0
No datasheets, whitepapers, case studies, videos, or demos linked yet.
Other Cloud-Native Application Protection (CNAPP) products
