Sonatype

FOSSA

The company provides software supply chain security and compliance tools for businesses to manage open source licenses, vulnerabilities and bills of materials.

JFrog

This company develops binary and artifact management software for enterprise devops teams and software developers to automate and secure the delivery of updates.

Anchore

This company provides software supply chain security and compliance tools to government agencies and large enterprises using containerised and cloud-native applications.

Phylum

This company provides a software supply chain security platform that identifies and blocks malicious open-source code for developers and security teams.

Lineaje

Lineaje develops software supply chain security tools for technology, financial and public sector organisations to manage components and vulnerabilities.

Ossprey

This company develops software supply chain security tools that scan open-source packages for malicious code to protect enterprise engineering teams and their production environments.

BlackDuck

This company develops application security testing software to manage open source risk and secure software supply chains for development and security teams.

Snyk

Snyk provides a security platform that identifies and fixes vulnerabilities in software code, dependencies, containers and cloud infrastructure for developers and enterprise businesses.