FOSSA

Phylum

This company provides a software supply chain security platform that identifies and blocks malicious open-source code for developers and security teams.

Debricked

This company provides software to identify and manage vulnerabilities in open source dependencies for software development teams.

Endor Labs

This company provides a cybersecurity platform for development teams to manage software supply chain risks and secure open source and AI-generated code.

Thoropass

This company develops compliance and audit automation software for technology businesses to manage security standards, vulnerability scanning and regulatory certifications.

Boost Security

This company provides a DevSecOps automation platform to secure software supply chains for engineering and security teams.

Mend

This company provides a platform for businesses to secure their custom software and artificial intelligence models through vulnerability scanning and automated remediation.

Ossprey

This company develops software supply chain security tools that scan open-source packages for malicious code to protect enterprise engineering teams and their production environments.

Ox Security

This company provides a software supply chain and application security platform for enterprises to manage vulnerabilities from code development through to cloud runtime.