Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.

Description

Dependency Track Saas provided by YourSky.blue is the managed cloud solution for Software Composition Analysis (SCA), based on the popular open-source Dependency-Track developed by OWASP®. It allows users to monitor all the chain of software components through powerful dashboards and configurable alerts. Always up to date with the latest security bulletins, it periodically scans already uploaded SBOMs for new security issues, out-of-date versions or licenses at risk. YourSky.blue Dependency Track SaaS is one of the most powerful and essential tools to manage software assets conveniently. The SaaS product also provides the highest security standards such as multi factor authentication, configurable application permissions, portfolio segmentation, Single-Sign-On to facilitate integration with any enterprise identity provider.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Anchore Yes 
Aqua Yes 
Cloudsmith Yes 
Contrast Security Yes 
Conviso Platform No 
Cybeats Yes 
Endor Labs Yes 
FOSSA Yes 
GitLab Yes 
JFrog Yes 
JSON Yes 
Mend.io Yes 
Microsoft Teams No 
Netdata No 
OWASP Threat Dragon Yes 
ServiceNow Yes 
Veracode Yes 
XML Yes 
Xygeni Yes 

Integrations

Anchore No 
Aqua No 
Cloudsmith No 
Contrast Security No 
Conviso Platform Yes 
Cybeats No 
Endor Labs No 
FOSSA No 
GitLab No 
JFrog No 
JSON No 
Mend.io No 
Microsoft Teams Yes 
Netdata Yes 
OWASP Threat Dragon No 
ServiceNow No 
Veracode No 
XML No 
Xygeni No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

USD 10.08 per user per month
Monthly and yearly subscription available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

CycloneDX

Website

cyclonedx.org

Vendor Details

Company Name

YourSky.blue

Founded

2022

Country

Switzerland

Website

yoursky.blue/

Product Features

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring Yes 
Continuous Monitoring Yes 
Defect Tracking Yes 
Interactive Scanning No 
Logging and Reporting Yes 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis Yes 
Threat Intelligence No 
Web Inspection No 

Alternatives

Alternatives

CodeSentry Reviews

CodeSentry

CodeSecure
Q-mast Reviews

Q-mast

Quokka