Deepbits Software Supply Chain Security

By 2025, 45% of organizations worldwide will have experienced attacks on their software supply chains, a three-fold increase from 2021. To protect software supply chain, the more recent executive order (14028) calls for the implementation of Software Bill of Materials (SBOM). A SBOM is a list of all the third-party components used in a codebase, and it contains information like licenses, versions, and sub-packages for security teams to evaluate component reputation or identify security and license risks.

Deepbits efficiently generates SBOM directly from binary code using patented Code AI technology. It uncovers components of binary code even they are statically linked in and enables visibility that far beyond other solutions. SBOMs are further processed to identify vulnerabilities, malware, license violations and other threats in software supply chain.

Features:

1. SBOM Analysis
2. Malware analysis
3. Vulnerability analysis
4. Dynamic behavior analysis
5. Misconfiguration detection
6. Integrations with various platforms (e.g., aws).
7. Continuous monitoring.

Supported Inputs: Docker image, memory snapshot, VM images, firmware, binary code, mobile apps, etc. Programs written by Java, C/C++, RUST, Javascript, Go, Ruby, Python, etc.

Use cases: Software Bill of materials. Generate and analyze SBOM for unknown binary files.

Container Security. Analyze docker images to find malware, vulnerabilities, suspicious behaviors, misconfigurations, etc.

Continuous Cloud Security. Build SBOM for your cloud services and use it to manage known and new threats of your cloud services efficiently.