Our Technology - WhiteSource

Component &
License
Database

With over 11B source files, over 200 languages, and over 100M libraries, our vulnerability database is the most comprehensive of its kind.

Open Source Community

Association

Vulnerabilities are precisely associated with their impacted components using patented technology built to distinguish true vulnerabilities from false positives.

Vulnerabilities
Database

Sourced from dozens of security advisories, issue trackers, the NVD and more, our database identifies vulnerabilities, analyzes severity, suggests fixes, and more.

Your Software

Discovery

All open source components, including transitive dependencies, are automatically identified each time you run your build or do a commit.

Detection

Components are automatically located on our database and matched with their licenses, vulnerabilities, remediation options, and other valuable metrics.

Prioritization

Vulnerabilities are prioritized based on if they are called by your code, reducing up to 85% of security alerts and speeding up remediation.

The Easiest Way to Manage Open Source

Comprehensive
Coverage

We support over 2000 languages in all environments, both containerized and serverless. We also support all relevant teams in your organization – legal, security, DevOps, and developers.