Endor Labs

Endor Labs

The Endor Labs Software Supply Chain Security Platform addresses three key software supply chain security pain points and outcomes: Open Source Code Security: Endor Labs helps engineers improve application performance and minimize attack surface by selecting and maintaining secure & high quality dependencies across the SDLC. Endor Labs replaces the existing breed of SCA solutions that lack context on code usage, thereby cutting ~80% of SCA noise so teams can focus on what matters. CI/CD Pipeline Security: Endor Labs helps you discover pipelines and shadow engineering, ensure consistent security tool coverage, monitor the posture of repositories, and implement build integrity verification, all through a single hook and policy-as-code framework integrated into your pipeline. Compliance & SBOMs: Endor Labs helps teams adhere to standards and regulations by detecting legal risk, generating and ingesting SBOMs/VEX, code signing, and align with NIST SSDF and CIS frameworks.

Disclaimer: This app directory is not affiliated, associated, authorized, endorsed by, or in any way officially connected with any software mentioned on this site. All product names, logos, and brands are property of their respective owners.

Related Apps

Snyk

Snyk

Snyk (pronounced sneak) is a developer security platform for securing custom code, open source dependencies, containers, and cloud infrastructure all from a single platform. Snyk’s developer security

Fossa

Fossa

Open source is a critical part of your software. In the average modern software product, over 80% of the source code shipped is derived from open source. Each component can have cascading legal, secur

GuardRails

GuardRails

GuardRails is an end-to-end security platform that makes AppSec easier for both security and development teams. We scan, detect, and provide real-time guidance to fix vulnerabilities early. Trusted by

Aikido Security

Aikido Security

Aikido Security is a developer-centric software security platform, providing advanced code scanning and cloud vulnerability assessments. Our platform prioritizes real threats, reduces false-positives

Cycode

Cycode

Cycode is the only end-to-end software supply chain (SSC) security solution to provide visibility, security, and integrity across all phases of the SDLC. Cycode integrates with all of your software de

OX Security

OX Security

Security should be an integral part of the software development process, not an afterthought. Founded by Neatsun Ziv and Lion Arzi, two former Check Point executives, OX is the first and only Active A

Xygeni

Xygeni

Secure your Software Development and Delivery! Xygeni Security specializes in Application Security Posture Management (ASPM), using deep contextual insights to effectively prioritize and manage securi

Apiiro

Apiiro

Apiiro is the leader in application security posture management (ASPM), unifying risk visibility, prioritization, and remediation with deep code analysis and runtime context. Get complete application

Scribe Security

Scribe Security

Scribe is a SaaS solution that provides continuous assurance for the security and trust worthiness of software artifacts, acting as a trust hub between software producers and consumers. Scribe central

The Code Registry

The Code Registry

The Code Registry is the world's first AI-powered code intelligence and insights platform, designed to safeguard and optimize software assets for businesses. By providing an independent, secure replic

Apideck

Apideck

Apideck enables developers to build integrations at scale through a set of Unified APIs covering Accounting, CRM, HRIS, ATS, File Storage, Project Management and eCommerce. Saving time and maintenance

Unified.to

Unified.to

"One API to integrate the all" — We’re the Unified API developer platform for SaaS integrations. One customer integration request can take a software team months to build. With Unified.to, you can lau

Aqua Security

Aqua Security

Aqua Security stops cloud native attacks across the application lifecycle and is the only company with a $1M Cloud Native Protection Warranty to guarantee it. As the pioneer in cloud native security,

SOOS

SOOS

Application Security Posture Management Platform Your organization’s application security posture should be more than just a checklist. SOOS’s ASPM is a dynamic, comprehensive approach to safeguardin

GitHub

GitHub

GitHub, Inc. is an American multinational corporation that provides hosting for software development and version control using Git. It offers the distributed version control and source code management

GitLab

GitLab

GitLab is a web-based DevOps lifecycle tool that provides a Git-repository manager providing wiki, issue-tracking and continuous integration and deployment pipeline features, using an open-source lice

Hotglue

Hotglue

hotglue enables developers to offer native, user-facing SaaS integrations to your customers in minutes without sacrificing control over the data. By embedding hotglue into your web app, customers can