Socket

This security platform is designed to protect software dependencies by identifying and preventing the use of vulnerable, malicious, or compromised packages within development workflows. Its key features include automated dependency scanning, real-time vulnerability detection, extensive security assessments of open source packages, and proactive blocking of risky code that could introduce supply chain threats or enable malicious exploits. It aims to address problems related to supply chain security, code integrity, and dependency management for software developers, DevOps teams, and organizations committed to secure coding practices by providing tools that ensure the safety and trustworthiness of third-party components.

Socketは次の場所にあります Application Security Testing (SAST/DAST) カテゴリー。