Phylum

About

Phylum is an automated, software supply chain security platform that continuously informs organizations of risk, blocks zero-day attacks, and enforces compliance and governance without disrupting innovation. Phylum analyzes open-source software as it is published and ingests software packages, lockfiles, and SBOMs to contextualize risks, prevent threats, and inform developers and security teams. Customers use the Phylum platform to protect applications from malicious code, evaluate third-party vendors, identify brand misuse and targeted attacks, complete mergers and acquisitions, and limit risks associated with using AI to write or fix source code. Phylum also offers a threat feed of real-time software supply chain attacks that can be consumed by any security analytics or observability product to enrich other findings.

In 2022, Phylum's analysis of open-source packages identified thousands of new malicious packages, malicious authors, and supply chain risks that culminated in a massive improvement to open-source software and the first inaugural Black Hat Innovation Spotlight award.

Download the Phylum GitHub App: https://github.com/marketplace/phylum-io

Keywords

open source security, software supply chain security, software supply chain risk, open source, devops, devsecops, vulnerability reachability, vulnerabilities, malware, malicious authors, license misuse

Amenities

No amenities listed yet

Upcoming Events

No upcoming events scheduled

Frequently Asked Questions

No reviews yet. Be the first to review!

Social Links

Photo Gallery

No photos available

Contact Information

Business Info

Location

Business Hours

Business hours not available