Loading
Cybersecurity
Hunts for malicious code and vulnerabilities introduced through software dependencies
Reviews third-party libraries, vendor software and open-source components to detect tampering, vulnerable dependencies and backdoors that attackers hide in the supply chain.
Supply chain attacks like SolarWinds and Log4Shell showed that dependencies are a major attack vector.