Phylum

Phylum is an automated, software supply chain security platform that continuously informs organizations of risk, blocks zero-day attacks, and enforces compliance and governance without disrupting innovation. Phylum analyzes open-source software as it is published and ingests software packages, lockfiles, and SBOMs to contextualize risks, prevent threats, and inform developers and security teams. Customers use the Phylum platform to protect applications from malicious code, evaluate third-party vendors, identify brand misuse and targeted attacks, complete mergers and acquisitions, and limit risks associated with using AI to write or fix source code. Phylum also offers a threat feed of real-time software supply chain attacks that can be consumed by any security analytics or observability product to enrich other findings. In 2022, Phylum's analysis of open-source packages identified thousands of new malicious packages, malicious authors, and supply chain risks that culminated in a massive improvement to open-source software and the first inaugural Black Hat Innovation Spotlight award. Download the Phylum GitHub App: https://github.com/marketplace/phylum-io

网站

https://www.phylum.io/

Phylum的外部链接

所属行业

软件开发

规模

11-50 人

总部

Evergreen，CO

类型

私人持股

创立

2020

领域

open source security、software supply chain security、software supply chain risk、open source、devops、devsecops、vulnerability reachability、vulnerabilities、malware、malicious authors和license misuse