Cycode
Xygeni.io
Aikido Security
Kiuwan Application Security
Snyk
Socket
Checkmarx
Arnica.io
Bytesafe
Verdaccio
npm
Sonatype Nexus Repository
Yarn
vulert
Open-Registry
Modular JavaScript
Cycode provides visibility, security, and integrity across the SDLC using a number of complementary solutions. Addressing software supply chain attacks using multiple tools and techniques from a single platform, Cycode is able to offer better results and lower AppSec tooling costs than could be achieved with individual tools.
Cycode BytesafeNo features have been listed yet.
No Bytesafe videos yet. You could help us improve this page by suggesting one.
Based on our record, Bytesafe should be more popular than Cycode. It has been mentiond 10 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
With all the recent cybersecurity attacks that were impacting the software supply chain, my company finally decided that we should start looking into some of these tools that protect software supply chains. I'm completely new to this space. Our friend Google suggested Cycode, Legit, and Apiiro as the hot new things, but I was not able to find any information from hands-on users that would help me to compare them... Source: about 3 years ago
Another option is to use a Dependency Firewall, such as Bytesafe, which allows you to quarantine unwanted open source packages with vulnerabilities or non-compliant licenses. The platform provides a policy engine where you define the open source usage and security rules and the Dependency Firewall does the enforcement. - Source: dev.to / over 2 years ago
There are a few companies in this space that are trying to do the "Security Seal of Approval" thing to various degrees. Tidelift is one company that has a bunch of "catalogs"[0] of packages. I'm not sure how their package metadata is generated though -- maybe semi-manually? There is also Bytesafe[1] which is supposed to help give you a way to "firewall" yourself from unapproved dependencies. I don't think they... - Source: Hacker News / over 2 years ago
I was trying bytesafe.dev recently and it was good for me, as it would stop the npm install of any package that had a security issue. But now that I am out of the free trial, it is to limited for me without paying for an upgraded plan. And their support never replies to my requests. Source: about 3 years ago
These steps will let you get your own private repository using Bytesafe:. - Source: dev.to / over 3 years ago
When using private repositories from Bytesafe, public dependencies will be proxied, pulling any required (and allowed) version into your private Maven repository. Using public repositories like Maven Central as an upstream makes sure you can access your organization's required open source dependencies - while maintaining security and control. - Source: dev.to / over 3 years ago
Xygeni.io - Secure your Software Development and Delivery
Verdaccio - Verdaccio is a lightweight private npm proxy registry built in Node.js
Aikido Security - Secure your code, cloud, and runtime in one central system. Find and fix vulnerabilities fast and automatically.
npm - npm is a package manager for Node.
Kiuwan Application Security - Kiuwan Application Security is an end-to-end Appsec platform.
Sonatype Nexus Repository - The world's only repository manager with FREE support for popular formats.