Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

CAST SBOM Manager allows users to create, customize, maintain Software Bill of Materials (SBOMs) with the highest level of customization. It automatically identifies open source and 3rd party components, as well as associated risks (security vulnerabilities, license risks, obsolete components), directly from the source code. You can also create and maintain SBOM metadata over time, including proprietary components, custom licenses and vulnerabilities.

Description

GitHub Advanced Security empowers developers and security professionals to collaborate effectively in addressing security debt while preventing new vulnerabilities from entering code through features such as AI-driven remediation, static analysis, secret scanning, and software composition analysis. With Copilot Autofix, code scanning identifies vulnerabilities, offers contextual insights, and proposes solutions within pull requests as well as for past alerts, allowing teams to manage their application security debt more efficiently. Additionally, targeted security campaigns can produce autofixes for up to 1,000 alerts simultaneously, significantly lowering the susceptibility to application vulnerabilities and zero-day exploits. The secret scanning feature, equipped with push protection, safeguards over 200 types of tokens and patterns from a diverse array of more than 150 service providers, including hard-to-detect secrets like passwords and personally identifiable information. Backed by a community of over 100 million developers and security experts, GitHub Advanced Security delivers the necessary automation and insights to help teams release more secure software on time, ultimately fostering greater trust in the applications they build. This comprehensive approach not only enhances security but also streamlines workflows, making it easier for teams to prioritize and address potential threats.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Azure DevTest Labs No 
C# No 
C++ No 
CAST Highlight Yes 
Claude Code No 
GitHub No 
GitHub Copilot No 
Go No 
Java No 
JavaScript No 
Kotlin No 
Microsoft Defender for Cloud No 
OpenAI Codex No 
OpsLevel No 
Qualio No 
Ruby No 
Swift No 
TypeScript No 

Integrations

Azure DevTest Labs Yes 
C# Yes 
C++ Yes 
CAST Highlight No 
Claude Code Yes 
GitHub Yes 
GitHub Copilot Yes 
Go Yes 
Java Yes 
JavaScript Yes 
Kotlin Yes 
Microsoft Defender for Cloud Yes 
OpenAI Codex Yes 
OpsLevel Yes 
Qualio Yes 
Ruby Yes 
Swift Yes 
TypeScript Yes 

Pricing Details

Free
Free for all users for up to 25 SBOMs
Free Trial No 
Free Version Yes 

Pricing Details

$49 per month per user
Free Trial No 
Free Version Yes 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

CAST

Founded

1996

Country

United States

Website

www.castsoftware.com/sbommanager

Vendor Details

Company Name

GitHub

Founded

2008

Country

United States

Website

github.com/enterprise/advanced-security

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Static Code Analysis

Analytics / Reporting No 
Code Standardization / Validation No 
Multiple Programming Language Support No 
Provides Recommendations No 
Standard Security/Industry Libraries No 
Vulnerability Management No 

Alternatives

Alternatives

Threat Detective Reviews

Threat Detective

Threat Detective Ltd