Sold by: KickdrumÂ
The efficiency of open source without the risk.
Kickdrum Open Source Assessments employ automated and manual inspections to uncover security vulnerabilities and commercially unfriendly license conflicts before they become a problem.
Overview
What to Expect
How well do you know your open source code? Kickdrum executes scans and follows a proven playbook for manually inspecting any potential risks, offering verbal readouts and written risk reports that detail any security and license red flags, along with remediation recommendations.
How it Works
Whether you’ve got a single product in one organization you’d like evaluated or need multiple products inspected across numerous organizations, Kickdrum can usually get started with secure, read-only access to your source code and a 1-2 hour product and source code orientation. In most cases, full reports and remediation recommendations are delivered within 7-10 business days.
What you Learn
Whether evaluating deal risk or looking for security insights that could impact your business, Kickdrum Open Source Evaluations include verbal readouts and written reports that cover:
- License non-compliance
- Security vulnerabilities
- Remediation recommendations
- Detailed scanning tool reports
- Inventory exports
- Option to Investigate open source modifications
Highlights
- Battle-Tested Playbook - Kickdrum’s processes identify and quantify the risk associated with open source usage, including security and license complexity, throughout the entire component network.
- Value Hyperfocus - 99% of companies use open source, but less than half know their full inventory. Kickdrum defends enterprises by protecting against incidents related to code that isn’t your own.
- Defense Assured - Through manual and automated assessments of maintainability and security risks, Kickdrum’s evaluations provide the action items necessary for safeguarding enterprise value.
Details
Sold by
Delivery method
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Pricing
Custom pricing options
Pricing is based on your specific requirements and eligibility. To get a custom quote for your needs, request a private offer.
Legal
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Resources
Vendor resources
Support
Vendor support
We provide a full readout of our investor-friendly Open Source Risk report and work with executive leadership teams to remediate risks and implement long-term compliance and vulnerability scanning pipelines.
Contact us at aws-marketplace-sales@kickdrum.com to get started.
Software associated with this service
Mend.io AI Native AppSec Platform
By Mend.io
Mend.io offers the first AI Native AppSec Platform, purpose-built to help organizations secure AI-generated code, embedded AI components, and traditional application elements, so they can move beyond chasing vulnerabilities and start proactively reducing real application risk.