Security CI Software

Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.

Vulmon Alerts provides vulnerability notification service. Vulmon Alerts is how you proactively detect vulnerabilities. Subscribe to any query related to vulnerabilities and get alerted before hackers.

freemium

Receive a free weekly report with a round-up of vulnerabilities and security news customized to your software stack.

Automate your dependency updates

Qualys helps your business automate the full spectrum of auditing, compliance and protection of your IT systems and web applications.

Find & fix security and compliance issues in open source libraries in real-time.

freemium

Black Duck Software Composition Analysis (SCA) provides a solution for managing open source security, quality, and license compliance risks that comes from the use of open source and third-party code.

Automated dependency updates for your Ruby, Python, JavaScript, PHP, .NET, Go, Elixir, Rust, Java and Elm.

SonarQube is code review and management software. The software is developed by SonarSource, which was founded in 2008 by Freddy Mallet, Simon Brandhof and Olivier Gaudin. Read more about SonarQube.

Open source license compliance and dependency analysis

Real-time, automated dependency updates for JavaScript projects.

Fix vulnerabilities in Node & npm dependencies with a click.

Get the great feeling of up-to-date dependencies and secure software without all the boring manual work