+
+

Related Products

  • Aikido Security
    238 Ratings
    Visit Website
  • KrakenD
    71 Ratings
    Visit Website
  • Astra Pentest
    283 Ratings
    Visit Website
  • SiteMinder
    671 Ratings
    Visit Website
  • Extole
    71 Ratings
    Visit Website
  • Source Defense
    7 Ratings
    Visit Website
  • Macaw AMS
    8 Ratings
    Visit Website
  • InMotion Hosting
    2,952 Ratings
    Visit Website
  • Paligo
    99 Ratings
    Visit Website
  • Folks
    175 Ratings
    Visit Website

About

OWASP CycloneDX is a lightweight Software Bill of Materials (SBOM) standard designed for use in application security contexts and supply chain component analysis. Strategic direction and maintenance of the specification is managed by the CycloneDX Core working group, with origins in the OWASP community. A complete and accurate inventory of all first-party and third-party components is essential for risk identification. BOMs should ideally contain all direct and transitive components and the dependency relationships between them. Adopting CycloneDX allows organizations to quickly meet these minimum requirements and mature into using more sophisticated use cases over time. CycloneDX is capable of achieving all SBOM requirements defined in the OWASP Software Component Verification Standard (SCVS).

About

Container images consist of layers and software packages, which are susceptible to vulnerabilities. These vulnerabilities can compromise the security of containers and applications. Docker Scout is a solution for proactively enhancing your software supply chain security. By analyzing your images, Docker Scout compiles an inventory of components, also known as a Software Bill of Materials (SBOM). The SBOM is matched against a continuously updated vulnerability database to pinpoint security weaknesses. Docker Scout is a standalone service and platform that you can interact with using Docker Desktop, Docker Hub, the Docker CLI, and the Docker Scout Dashboard. Docker Scout also facilitates integrations with third-party systems, such as container registries and CI platforms. Reveal and dig into the composition of your images. Ensure that your artifacts align with supply chain best practices.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Organizations searching for a complete Software Composition Analysis solution

Audience

Companies in search of a solution to secure their applications and manage vulnerabilities

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version
Free Trial

Pricing

$5 per month
Free Version
Free Trial

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

CycloneDX
cyclonedx.org

Company Information

Docker
Founded: 2013
United States
docs.docker.com/scout/

Alternatives

CodeSentry

CodeSentry

CodeSecure

Alternatives

Categories

Categories

Integrations

GitHub
GitLab
Amazon Elastic Container Registry (ECR)
Aqua
ArmorCode
Arnica
Azure Container Registry
Azure DevOps Server
Checkmarx
Checkov
Codenotary
Docker
Endor Labs
FOSSA
Finite State
Flexera One
Google
OWASP Threat Dragon
Vdoo
Veracode

Integrations

GitHub
GitLab
Amazon Elastic Container Registry (ECR)
Aqua
ArmorCode
Arnica
Azure Container Registry
Azure DevOps Server
Checkmarx
Checkov
Codenotary
Docker
Endor Labs
FOSSA
Finite State
Flexera One
Google
OWASP Threat Dragon
Vdoo
Veracode
Claim CycloneDX and update features and information
Claim CycloneDX and update features and information
Claim Docker Scout and update features and information
Claim Docker Scout and update features and information