CodeSecure and FOSSA announced a strategic partnership and native product integration that enables organizations to eliminate security blindspots associated with both third party and open source code.
Endor Labs DroidGPT, an AI that can help developers select better open source software, was launched in private beta.
Organizations can use the same conversational research style as ChatGPT to evaluate open source software and measure possible risk. When developers aren’t sure which package to use, they can simply ask.
DroidGPT combines the power of ChatGPT with Endor Labs' proprietary risk data to help users quickly and easily research open source software (OSS) packages in a conversational manner.
Developers using DroidGPT can log onto OSS Explorer within the Endor Labs platform, ask questions like "what are the best logging packages for Java," and receive instant answers. All results are overlaid with risk scores revealing the quality, popularity, trustworthiness, and security of each package.
Other types of questions can you ask DroidGPT:
● “What packages in Go have a similar function as log4j?”
● “What packages are similar to go-memdb?”
● "Which Go packages have the least known vulnerabilities?"
Key benefits of DroidGPT:
● Conversational Interface: Users can ask questions naturally and receive accurate and detailed answers, making their research process more efficient and enjoyable.
● Data-Driven Insights: Endor Labs' risk scores offer a comprehensive evaluation of OSS packages, taking into account factors such as quality, popularity and security.
● Informed Decision-Making: The integration of DroidGPT’s AI-driven answers with real-world risk data empowers developers to make the best decisions when selecting open source software packages.
Industry News
Bauplan, a Python-first serverless data platform that transforms complex infrastructure processes into a few lines of code over data lakes, announced its launch with $7.5 million in seed funding.
Perforce Software announced the launch of the Kafka Service Bundle, a new offering that provides enterprises with managed open source Apache Kafka at a fraction of the cost of traditional managed providers.
LambdaTest announced the launch of the HyperExecute MCP Server, an enhancement to its AI-native test orchestration platform, HyperExecute.
Cloudflare announced Workers VPC and Workers VPC Private Link, new solutions that enable developers to build secure, global cross-cloud applications on Cloudflare Workers.
Nutrient announced a significant expansion of its cloud-based services, as well as a series of updates to its SDK products, aimed at enhancing the developer experience by allowing developers to build, scale, and innovate with less friction.
Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.
Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.
The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.
Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.
SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.
Akamai Technologies introduced App & API Protector Hybrid.
Veracode has been granted a United States patent for its generative artificial intelligence security tool, Veracode Fix.
Zesty announced that its automated Kubernetes optimization platform, Kompass, now includes full pod scaling capabilities, with the addition of Vertical Pod Autoscaler (VPA) alongside the existing Horizontal Pod Autoscaler (HPA).
Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.