Sold by: ReversingLabsÂ
Deployed on AWS
ReversingLabs Spectra Assure is a software supply chain security platform that scans thousands of file formats to identify embedded threats and secrets leakage. Spectra Assure integrates with CI/CD, cloud, and ITSM tools to automate testing, enforce politics, and establish security guardrails. Spectra Assure supports continuous, customized, extensive coverage for third-party software and open-source components.
Overview
Security teams must adapt to new and expansive attack vectors and surfaces. They commonly need to go further than SCA tools to be protected from highly targeted, sophisticated supply chain attacks rather than just vulnerabilities.
ReversingLabs Spectra Assure is a supply chain security platform that scans hundreds of file formats to identify embedded threats and integrates with CI/CD, cloud, and ITSM tools to automate testing, enforce policies, and establish security guardrails. It supports continuous, customized, and extensive coverage for third-party software and open source components.
Assess Your Risk Continuously collect software bills of material (SBOMs) and risk reports, which follow the CycloneDX and SPDX format, and review each component's supplier, version, relationship with other dependencies, and embedded threats and vulnerabilities.
Find Your Threats Review executables, components, and dependencies to monitor behaviors and detect suspicious changes in build systems, workflows, and large packages. Discover threats with scanning from the world's largest private repository of goodware and malware.
Consistently Remediate Threats Automatically enforce risk-based policy controls, verify that severe issues are remediated, track your security posture, and support custom scanning where you can specify what to scan for, how alerts are prioritized, and review recommended steps for remediation with every alert.
For custom pricing, EULA, or a private contract, please contact sales@reversinglabs.com , for a private offer.
Highlights
- Software Bill of Materials: Visualize your attack surface by seeing the open source and third-party software components in your environment
- Malicious behavior detection: Discover abnormal behaviors and determine if they should be investigated
- Secrets Leakage Prevention: Reduce exposed secrets and sensitive information by prioritizing and suppressing alerts to reduce noise and improve response times
Details
Sold by
Delivery method
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
RL SSCS 0-10GB/month | RL Software Supply Chain Security Platform - 0-10 GB per month | $75,000.00 |
RL SSCS 10-25GB/month | RL Software Supply Chain Security Platform - 10-25 GB per month | $135,000.00 |
RL SSCS 25-50GB/month | RL Software Supply Chain Security Platform - 25-50 GB per month | $216,000.00 |
RL SSCS 50-100GB/month | RL Software Supply Chain Security Platform - 50-100 GB per month | $324,000.00 |
RL SSCS 100-250GB/month | RL Software Supply Chain Security Platform - 100-250 GB per month | $450,000.00 |
RL SSCS 250-500GB/month | RL Software Supply Chain Security Platform -250-500 GB per month | $600,000.00 |
RL SSCS 500-1000GB/month | RL Software Supply Chain Security Platform - 500-1000 GB per month | $700,000.00 |
Vendor refund policy
No refunds are available
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
ReversingLabs provides technical support 24/7/365 for Software Supply Chain Security products.
Developer Portal https://secure.softwareÂ
Learning Lab https://www.reversinglabs.com/learning-with-reversinglabs If you are an existing customer requiring support with ReversingLabs products and services we can be reached via phone at: +1.617.250.7518-2 via email at: support@reversinglabs.comÂ
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Software Composition Analysis
Scans hundreds of file formats to identify embedded threats in third-party software and open-source components
Threat Detection Repository
Utilizes world's largest private repository of goodware and malware for comprehensive scanning and threat discovery
Software Bill of Materials (SBOM) Generation
Continuously collects software bills of material following CycloneDX and SPDX formats with detailed component analysis
Policy Enforcement Mechanism
Automatically enforces risk-based policy controls with custom scanning capabilities and prioritized alert management
CI/CD Security Integration
Integrates with continuous integration, cloud, and IT service management tools to automate security testing and establish security guardrails
Static Application Security Testing
Flexible solution capable of identifying vulnerabilities across 25+ programming languages and frameworks
Software Composition Analysis
Comprehensive scanning of open source software and third-party libraries to identify and prioritize potential vulnerabilities and license risks
Infrastructure as Code Analysis
Detection of security misconfigurations in infrastructure templates to prevent potential deployment errors and security risks
Multi-Scan Integration
Single event trigger for simultaneous scanning of source code, dependencies, and infrastructure templates with centralized result aggregation
Vulnerability Detection Mechanism
Advanced scanning of uncompiled code with targeted re-scanning of new or modified code segments for efficient threat identification
Vulnerability Monitoring
Continuous monitoring for security, legal, and quality risks across software development lifecycle
Software Composition Analysis
Automated dependency management with reachability analysis engine for prioritizing remediation
Policy Enforcement
Customizable policy implementation to reduce manual compliance checks and automate violation management
Software Bill of Materials
Automated generation of comprehensive software component inventory with detailed tracking
Remediation Guidance
Automated fix recommendations with guaranteed non-disruptive resolution strategies for identified vulnerabilities
Standard contract
No
No
Customer reviews
0 ratings
0 AWS reviews
|
7 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Tim M.
I evaluated the entire market category and chose RL for my business!
Reviewed on Apr 22, 2025
Review provided by G2
What do you like best about the product?
RL has an industry leading, humongous repository of both known bad (malware) and known good files (it's critical to have both). At the time of this review they have approximately 40 billion files and support more file types and larger files (including containers and archives like ISO and ZIP) than anyone else.
What do you dislike about the product?
I do hope that, one day, RL will have a community facing website similar to VT to allow independent and not-yet-customers to see the value in their repository and analysis directly.
What problems is the product solving and how is that benefiting you?
RL allows me to receive a very accurate, third-party opinion of executable and other types of files involved in detections on my customers' endpoint devices, and they do this analysis for me (for files already in their massive repository) in a few milliseconds, which aligns with my company's mission of making verdicts on detected threats in milliseconds.
Financial Services
Really good
Reviewed on Sep 13, 2024
Review provided by G2
What do you like best about the product?
It's really easy to use and help me to maintain save my pc. I used to use it a lot every day, and I fell constable using it. It was easy to implemantate and integrate.
What do you dislike about the product?
Nothing at all. I thing that it works perfect for all the tings that I need. I just don't need customer support for now.
What problems is the product solving and how is that benefiting you?
It keep my computer health really well
Guercy Miguel D.
Reverse Engineering with Reverse Lab
Reviewed on Sep 11, 2024
Review provided by G2
What do you like best about the product?
I appreciate the real-world scenarios and hands-on challenges that sharpen my reverse engineering and malware analysis skills.
What do you dislike about the product?
The platform could benefit from more detailed documentation or step-by-step guides for complex challenges, as some tasks can feel a bit unclear for beginners as I am a beginner.
What problems is the product solving and how is that benefiting you?
It helps automate the process of analyzing malware, saving time and reducing manual effort, it breaks down malicious files, allowing me to better understand how they operate and their impact on systems and it handles large volumes of files, making it easier to analyze threats at scale.
Jesse Harris
Comes with a large sample size and helps t stay on top of emerging threats
Reviewed on Sep 19, 2023
Review provided by PeerSpot
How has it helped my organization?
The solution helps to stay on top of emerging threats with easy integration with other products.Â
What is most valuable?
ReversingLabs has a large sample size.Â
What needs improvement?
The solution needs to improve integrations.Â
For how long have I used the solution?
I have been using the solution for four to five years.Â
What do I think about the stability of the solution?
ReversingLabs' stability is excellent.Â
What do I think about the scalability of the solution?
I rate the tool's scalability a ten out of ten.Â
How are customer service and support?
ReversingLabs' tech support is responsive.Â
How was the initial setup?
The tool's ReversingLabs is straightforward.Â
What was our ROI?
We have seen ROI with the tool's use. You can ROI within one year.Â
What other advice do I have?
I rate the product a ten out of ten.Â
Computer Software
Best Security
Reviewed on Apr 13, 2023
Review provided by G2
What do you like best about the product?
ANALYZES AND SECURES SOFTWARE PACKAGE, CONTAINER AND FILE, AT INCREDIBLE SPEEDS!
What do you dislike about the product?
I can't say there is really much to complain about they do a really good job!
What problems is the product solving and how is that benefiting you?
No need to worry about cybersecurity with using their services!