Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Enhance your security framework for open source by implementing automated best practices, creating an integrated workflow that benefits both security and development teams. This cloud-native security solution minimizes risk and safeguards revenue while allowing developers to maintain their pace. The dependency firewall effectively isolates harmful open source elements before they can affect developers and infrastructure, thus preserving data integrity, company assets, and brand reputation. Our comprehensive policy engine examines various threat indicators, including recognized vulnerabilities, licensing details, and rules defined by the customer. Gaining visibility into the open-source components utilized in applications is essential for mitigating potential vulnerabilities. The Software Composition Analysis (SCA) and dashboard reporting provide stakeholders with a complete perspective and prompt updates regarding the existing environment. Additionally, you can detect the introduction of new open-source licenses within the codebase and automatically monitor compliance issues involving licenses, effectively managing any problematic or unlicensed packages. By adopting these measures, organizations can significantly improve their ability to respond to security challenges in real time.

Description

Open source, multi-cloud platform to scan, map, and rank vulnerabilities in containers, images hosts, repositories, and running containers. ThreatMapper detects threats to your applications in production across clouds, Kubernetes and serverless. You cannot secure what you can't see. ThreatMapper automatically discovers your production infrastructure. It can identify and interrogate cloud instances, Kubernetes nodes and serverless resources. This allows you to discover the applications and containers, and map their topology in real time. ThreatMapper allows you to visualize and discover the external and internal attack surfaces for your applications and infrastructure. Bad actors can gain access to your infrastructure by exploiting vulnerabilities in common dependencies. ThreatMapper scans hosts and containers for known vulnerable dependencies. It also takes threat feeds from more than 50 sources.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

GitHub Yes 
Slack Yes 
AWS Fargate No 
Amazon Elastic Container Registry (ECR) No 
CircleCI No 
CycloneDX Yes 
Elasticsearch No 
Google Yes 
Google Security Operations (SecOps) No 
JFrog Artifactory No 
Jenkins Yes 
Jira No 
Kubernetes No 
Maven Yes 
Microsoft 365 Yes 
Microsoft Azure No 
OpenShift Cloud Functions No 
Oracle Cloud Infrastructure No 
PagerDuty No 
Splunk Cloud Platform No 

Integrations

GitHub Yes 
Slack Yes 
AWS Fargate Yes 
Amazon Elastic Container Registry (ECR) Yes 
CircleCI Yes 
CycloneDX No 
Elasticsearch Yes 
Google No 
Google Security Operations (SecOps) Yes 
JFrog Artifactory Yes 
Jenkins No 
Jira Yes 
Kubernetes Yes 
Maven No 
Microsoft 365 No 
Microsoft Azure Yes 
OpenShift Cloud Functions Yes 
Oracle Cloud Infrastructure Yes 
PagerDuty Yes 
Splunk Cloud Platform Yes 

Pricing Details

€1100 per month
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

Bitfront

Country

Sweden

Website

bytesafe.dev/

Vendor Details

Company Name

Deepfence

Country

United States

Website

deepfence.io/threatmapper/

Product Features

Continuous Integration

Build Log No 
Change Management No 
Configuration Management No 
Continuous Delivery Yes 
Continuous Deployment Yes 
Debugging No 
Permission Management No 
Quality Assurance Management No 
Testing Management No 

DevOps

Approval Workflow Yes 
Dashboard No 
KPIs No 
Policy Management No 
Portfolio Management No 
Prioritization Yes 
Release Management No 
Timeline Management No 
Troubleshooting Reports No 

License Management

Automatic SKU Recognition No 
Central LM Server No 
Copy Protection No 
History Tracking No 
Node Management No 
Online Activation No 
Portable License No 
Sarbanes-Oxley Compliance No 
Timing Rights No 
Trial License No 

Source Code Management

Access Controls/Permissions No 
Bug Tracking No 
Build Automation No 
Change Management No 
Code Review No 
Collaboration Yes 
Continuous Integration Yes 
Repository Management No 
Version Control No 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Statistical Analysis

Analytics No 
Association Discovery No 
Compliance Tracking No 
File Management No 
File Storage No 
Forecasting No 
Multivariate Analysis No 
Regression Analysis No 
Statistical Process Control No 
Statistical Simulation No 
Survival Analysis No 
Time Series No 
Visualization No 

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning No 
Patch Management No 
Policy Management No 
Prioritization Yes 
Risk Management No 
Vulnerability Assessment No 
Web Scanning No 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring Yes 
Continuous Monitoring Yes 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting Yes 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Product Features

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Alternatives

Alternatives

Bytesafe Reviews

Bytesafe

Bitfront
PT Application Inspector Reviews

PT Application Inspector

Positive Technologies
ThreatStryker Reviews

ThreatStryker

Deepfence
Revenera SCA Reviews

Revenera SCA

Revenera