Greenbone

FOSSA specializes in open-source risk management within the software industry. The company offers solutions for license scanning, compliance automation, and vulnerability management to ensure secure and compliant software development. It serves sectors that require open-source compliance and security measures such as the healthcare and federal sectors with food and drug administration and federal risk and authorization management program (FedRAMP) compliance needs. It was founded in 2015 and is based in San Francisco, California.

Illustria develops supply chain security solutions intended to protect customers from open-source supply chain attacks. The company's security solution prevents open-source from deploying malicious code during the development phase, includes solving for attacks such as typo-squatting, dependency confusion, and virus deployment, and provides traditional composition analysis, enabling businesses by easing compliance, and licensing challenges. It primarily serves the cybersecurity industry. The company was founded in 2021 and is based in Tel Aviv, Israel.

Insignary specializes in software composition analysis within the cybersecurity domain. The company offers solutions that identify risks in custom code and third-party binaries, focusing on open-source vulnerabilities and license compliance. It serves sectors that require robust security measures for software supply chain management. It was founded in 2016 and is based in Seoul, South Korea.

Sonatype is involved in secure software development with a focus on open source and artificial intelligence within the software supply chain management industry. The company provides products that automate the governance of open source and AI, manage centralized binary repositories, and offer protection against open source malware. Sonatype's solutions are relevant to developers, DevOps, and security roles. It was founded in 2008 and is based in Fulton, Maryland.

Trackd is a company that specializes in vulnerability and patch management in the cybersecurity domain. They offer a platform that provides information on the impact of software patches, assisting remediation teams in applying them and automating the process when safe. The platform aims to decrease the time needed to address vulnerabilities and limit disruption to systems. It was founded in 2022 and is based in New York, New York.

Checkmarx provides a platform for securing application development from code to cloud across various sectors. The company's offerings include static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and tools for API security, container security, infrastructure as code security, and malicious package protection. Checkmarx serves a range of industries, with an aim to integrate security within the software development lifecycle. It was founded in 2006 and is based in Paramus, New Jersey.