Our Solution becomes part of your software development lifecycle (SDLC) and automates the entire process of open source components selection, approval, and management, including finding and fixing vulnerable components.
WhiteSource Secures Your Open Source Usage
WhiteSource integrates with your CI servers, build tools and repositories to detect all open source components in your software, without ever scanning your code. It provides you with real-time alerts on vulnerable or problematic components, generates comprehensive up-to-date reports in one-click and enables you to streamline your entire open source management process with automated policies. More Info »
Get Real-Time Alerts on Security Vulnerabilities
WhiteSource will alert you in real-time whenever a vulnerable open source component is added to your build or when a vulnerability is discovered in a component already used in your software. You will also be alerted on severe software bugs, problematic licenses (according to your pre-defined policies), new versions and available fixes.
Shift Left Your Open Source Management
WhiteSource integrates with your GitHub repository and JFrog Artifactory to detect all problematic open source components as soon as they’re added, so you can find and fix issues even before you run a build.
WhiteSource also offers a browser plug-in which displays information on open source components, while you’re searching online repositories (like NuGet). This tool helps developers choose better components by displaying license information, quality rating, and security vulnerabilities, while also showing whether it meets their company’s policy before they even download it.
Automated Your Open Source Approval Process
Define your company’s open source policy to automatically approve, reject or ask for approval, on the basis of each component’s license, vulnerabilities, severe software bugs, # of newer versions and more
Links to official WhiteSource sites
Official Website Facebook GitHub
Pricing Information
Subscription
Feature
Continuous Integration
Add a feature
Category
Development
Tags
alm application-builder continuous-integration development foss license-manager programming sdlc security-auditing security-monitoring vulnerability-scanner
WhiteSource (sometimes referred to as WhiteSource) was added by ronrymon in
Oct 2014 and the latest update was made in
Mar 2019. The list of alternatives was updated Nov 2017 There is a history of all activites on
WhiteSource in our Activity Log.
It's possible to update the information on WhiteSource or report it as discontinued, duplicated or spam.
