GrammaTech, a leading provider of application security testing products and software research services, announced a new version of its CodeSentry software supply chain security platform which enables organizations to detect security vulnerabilities contained in third party code. CodeSentry uses binary software composition analysis (BSCA) to identify known threats (CVEs) and common weakness enumeration (CWE) errors in externally developed software components without access to source code.
Latest WebsiteHost.Review Insights : NVIDIA Raises the Standard of Low Code DevOps with the NVIDIA AI Enterprise 2.1
.@GrammaTech CodeSentry 4.0 enables developers to identify security vulnerabilities hidden in third party code. Binary software composition analysis platform closes security gap in pre-built software without access to source code
While the bulk of the industry’s attention has focused on vulnerabilities in open source software (OSS) with initiatives like OpenSSF, an equally important problem remains. According to VDC Research, nearly 60% of software products contain third-party code, most of which uses open source components under the hood. Since this pre-built code is delivered in binary format, organizations lack the ability to detect security risks it contains prior to using it to develop applications or embedding it in physical products such as automobiles, medical devices and more.
To detect vulnerabilities in third-party or pre-built code during the development process, CodeSentry 4.0 provides comprehensive support for desktop and mobile applications, firmware, containers, and embedded operating systems.
“Software development teams are increasingly being tasked with ensuring the integrity of their products by avoiding security and safety defects that can lead to costly product failures or recalls,” said Mike Dager, CEO of GrammaTech. “This security concern has even escalated the creation of regulatory requirements for the software supply chain from the FDA and the recent presidential Executive Order. CodeSentry 4.0 makes it possible for organizations to verify the contents, security and safety of third-party software components they use to build their products.”
Read More About AI News : Role of AI in Helping B2B companies that are Missing Out on Buyer Intent Data
Securing Third Party Code from the Inside Out
Since source code is rarely available for third party software, binary analysis is an emerging alternative for extracting a software bill of materials (SBOM) to identify components, dependencies and security vulnerabilities they may contain. Offered as a SaaS or on-premises solution, CodeSentry automates this process – providing a foundation for improving software supply chain security.
CodeSentry 4.0 provides the broadest coverage of any binary SCA platform that includes:
Future of AI-driven Customer Relationship: Microsoft’s Viva Sales and the Future of AI-driven Customer Relationship and Experience Management
[To share your insights with us, please write to admin@websitehost.review]
The post GrammaTech CodeSentry 4.0 Enables Developers to Identify Security Vulnerabilities Hidden in Third Party Code appeared first on WebsiteHost.Review.
Cloud storage makes it easy to store and access files from anywhere, but it also…
Flare researchers have identified a threat actor known as TeamPCP behind a large-scale campaign targeting…
Threat actors are using artificial intelligence (AI) to accelerate cloud intrusions. In a recent incident…
A Windows Admin Center Azure SSO flaw could let attackers pivot from one compromised machine…
A newly discovered vulnerability in Traefik’s experimental ingress-nginx provider silently disabled TLS certificate verification for…
Effective fire prevention in data centers requires a coordinated approach that adapts to evolving hazards…