SCA stories

Checkmarx has been named a leader in the IDC MarketScape ASPM 2025 report for its AI-driven, developer-focused application security platform.

Black Duck has launched a GitHub app to automate security scans, helping development teams identify vulnerabilities early and streamline application security.

GitHub has partnered with Endor Labs, integrating advanced security software to help developers swiftly identify and manage critical vulnerabilities within the platform.

Endor Labs has launched AI Model Discovery, a feature helping businesses identify and manage open source AI models, enhancing application security.

Veracode has acquired Phylum's technology to enhance their ability to combat software threats, addressing rising risks in open-source software security.

Sonatype and OpenText have partnered to create an integrated platform that enhances application security, streamlining compliance and risk management.

Microsoft has integrated Endor Labs' Software Composition Analysis into Defender for Cloud, enabling unified security from code development to runtime.

Sonatype has been named a leader in Software Composition Analysis by Forrester, praised for its high performance in security and dependency management.

Data Theorem has unveiled Code Secure, a product designed to bolster software supply chain security by integrating advanced security features.

Traceable AI has teamed up with AWS to bolster API security, enabling seamless integration through the AWS Marketplace amid rising threats to cloud-native systems.

Revenera launches OSS Inspector for IntelliJ IDEA, helping developers identify open source software risks directly in their IDE, ensuring secure, compliant code.

Claroty partners with AWS to bolster cyber-physical systems security through a multi-year collaboration, targeting organisations integrating cloud technologies.

Sonatype releases its SBOM Manager, a crucial tool to help organisations track and manage software components.

ForAllSecure reveals new AI-powered tool, Mayhem, a dynamic software bill of materials tool that proactively battles exploitable application vulnerabilities.

Cybersecurity firm GitGuardian has introduced a Software Composition Analysis module, designed to enhance the health of organisations' codebases by automating detection and remediation of vulnerabilities in software dependencies.

CAST Highlight receives significant recognition in G2's Winter 2024 Reports, gaining high rankings in SCA and Application Portfolio Management, alongside being praised for its user-centric design.

DataStax and Amazon Web Services join forces to accelerate the delivery of progressive generative AI solutions.

ServiceNow and Amazon Web Services (AWS) have announced a five-year strategic collaboration offering AI-powered business applications.

Global graph database firm, Neo4j, forms a multi-year partnership with Amazon Web Services to streamline development and amplify business solutions.

DoiT International announces a five-year Strategic Collaboration Agreement with Amazon Web Services, aiming to generate $5B in business.