Checkmarx announced a new generation in software supply chain security with its Secrets Detection and Repository Health solutions to minimize application risk.
Endor Labs DroidGPT, an AI that can help developers select better open source software, was launched in private beta.
Organizations can use the same conversational research style as ChatGPT to evaluate open source software and measure possible risk. When developers aren’t sure which package to use, they can simply ask.
DroidGPT combines the power of ChatGPT with Endor Labs' proprietary risk data to help users quickly and easily research open source software (OSS) packages in a conversational manner.
Developers using DroidGPT can log onto OSS Explorer within the Endor Labs platform, ask questions like "what are the best logging packages for Java," and receive instant answers. All results are overlaid with risk scores revealing the quality, popularity, trustworthiness, and security of each package.
Other types of questions can you ask DroidGPT:
● “What packages in Go have a similar function as log4j?”
● “What packages are similar to go-memdb?”
● "Which Go packages have the least known vulnerabilities?"
Key benefits of DroidGPT:
● Conversational Interface: Users can ask questions naturally and receive accurate and detailed answers, making their research process more efficient and enjoyable.
● Data-Driven Insights: Endor Labs' risk scores offer a comprehensive evaluation of OSS packages, taking into account factors such as quality, popularity and security.
● Informed Decision-Making: The integration of DroidGPT’s AI-driven answers with real-world risk data empowers developers to make the best decisions when selecting open source software packages.
Industry News
SmartBear has appointed Dan Faulkner, the company’s Chief Product Officer, as Chief Executive Officer.
Horizon3.ai announced the release of NodeZero™ Kubernetes Pentesting, a new capability available to all NodeZero users.
Veracode acquired certain assets of Phylum, including its malicious package analysis, detection, and mitigation technology.
AppViewX announced the completion of its acquisition by Haveli Investments.
Check Point® Software Technologies Ltd. has been recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Email Security Platforms (ESP).
Progress announced its partnership with the American Institute of CPAs (AICPA), the world’s largest member association representing the CPA profession.
Kurrent announced $12 million in funding, its rebrand from Event Store and the official launch of Kurrent Enterprise Edition, now commercially available.
Blitzy announced the launch of the Blitzy Platform, a category-defining agentic platform that accelerates software development for enterprises by autonomously batch building up to 80% of software applications.
Sonata Software launched IntellQA, a Harmoni.AI powered testing automation and acceleration platform designed to transform software delivery for global enterprises.
Sonar signed a definitive agreement to acquire Tidelift, a provider of software supply chain security solutions that help organizations manage the risk of open source software.
Kindo formally launched its channel partner program.
Red Hat announced the latest release of Red Hat Enterprise Linux AI (RHEL AI), Red Hat’s foundation model platform for more seamlessly developing, testing and running generative artificial intelligence (gen AI) models for enterprise applications.
Fastly announced the general availability of Fastly AI Accelerator.