Antares
Antares is a family of open-weight security small language models purpose-built to localize known vulnerabilities inside large codebases. Antares-350M and Antares-1B are compact enough to run locally or on premises, helping teams keep proprietary source code inside their environment while reducing inference cost and runtime. Starting from a vulnerability description, advisory, or CWE category, the model follows an iterative investigation process similar to a human analyst, it searches for relevant code patterns, reads candidate files, incorporates new evidence, changes direction when a path is unproductive, and narrows the search to the files most likely to contain the weakness. Antares returns a ranked list of potentially vulnerable source files together with the terminal exploration trace that produced the result, making findings easier to review and prioritize.
Learn more
SOCRadar Extended Threat Intelligence
SOCRadar provides a unified, cloud-hosted platform designed to enrich your cyber threat intelligence by contextualizing it with data from your attack surface, digital footprint, dark web exposure, and supply chain.
We help security teams see what attackers see by combining External Attack Surface Management, Cyber Threat Intelligence, and Digital Risk Protection into a single, easy-to-use solution. This enables your organization to discover hidden vulnerabilities, detect data leaks, and shut down threats like phishing and brand impersonation before they can harm your business.
By combining these critical security functions, SOCRadar replaces the need for separate, disconnected tools. Our holistic approach offers a streamlined, modular experience, providing a complete, real-time view of your threat landscape to help you stay ahead of attackers.
Learn more
SCANOSS
SCANOSS believes now is the time to reinvent Software Composition Analysis with a goal of ‘start left’ and a focus first on the foundation of reliable SCA, the SBOM. An SBOM that does not require a small army of auditors to make it usable. So, SCANOSS provides an SBOM that that is ‘always on’. SCANOSS released the first entirely Open Source SCA software platform for Open Source Inventorying, specifically designed for modern development (DevOps) environments. SCANOSS also released the first Open OSS Knowledge Base, free to the community. Our architecture is API-centric, built for developers. The “shift left” paradigm brings license compliance validation to the earliest possible stage in a development process. We can go as left as intercepting a CTRL-V in your IDE before undeclared Open Source is pasted. The first Open Source Inventorying engine built specifically for modern development and DevOps teams of all sizes.
Learn more
Revenera SCA
Take control of your open source software management.
Empower your organization to manage open source software (OSS) and third-party components. FlexNet Code Insight helps development, legal and security teams to reduce open source security risk and manage license compliance with an end-to-end system.
FlexNet Code Insight is a single integrated solution for open source license compliance and security. Find vulnerabilities and remediate associated risk while you build your products and during their entire lifecycle. Manage open source license compliance, add automation to your processes, and implement a formal OSS strategy that balances business benefits and risk management. Integrate with build tools, CI/CD and SCM tools, artifact repositories, external repositories or build your own integrations using the FlexNet Code Insight REST API framework to make code scanning easy and effective.
Learn more