Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • Aikido Security Reviews & Ratings
    71 Ratings
    Company Website
  • Source Defense Reviews & Ratings
    7 Ratings
    Company Website
  • KrakenD Reviews & Ratings
    66 Ratings
    Company Website
  • Open LMS Reviews & Ratings
    77 Ratings
    Company Website
  • Hyperproof Reviews & Ratings
    228 Ratings
    Company Website
  • Onspring Reviews & Ratings
    169 Ratings
    Company Website
  • ONLYOFFICE Reviews & Ratings
    656 Ratings
    Company Website
  • Psono Reviews & Ratings
    92 Ratings
    Company Website
  • Moodle Reviews & Ratings
    3,865 Ratings
    Company Website
  • D&B Risk Analytics Reviews & Ratings
    58 Ratings
    Company Website

What is Sonatype Auditor?

Sonatype Auditor streamlines the management of open-source security by automatically creating Software Bills of Materials (SBOM) and pinpointing risks linked to third-party software. It features real-time monitoring capabilities for open-source components, allowing for the detection of vulnerabilities and license infringements. By delivering actionable insights and guidance for remediation, Sonatype Auditor assists organizations in fortifying their software supply chains while adhering to regulatory requirements. With ongoing scanning and the enforcement of policies, it empowers businesses to oversee their use of open-source materials effectively, minimizing security risks. Additionally, this tool fosters a proactive approach to security, encouraging organizations to stay ahead of potential threats.

What is Finite State?

Finite State provides innovative risk management strategies tailored for the software supply chain, featuring in-depth software composition analysis (SCA) and software bills of materials (SBOMs) designed for today's interconnected landscape. By offering comprehensive end-to-end SBOM solutions, Finite State equips Product Security teams to meet various regulatory, customer, and security obligations effectively. Its exceptional binary SCA delivers critical insights into third-party software, allowing Product Security teams to evaluate risks in a contextual manner and enhance their ability to detect vulnerabilities. With its focus on visibility, scalability, and efficiency, Finite State consolidates information from all security tools into a single, cohesive dashboard, ensuring that Product Security teams have the utmost clarity in their operations. This integration not only streamlines workflows but also significantly boosts the overall security posture of organizations.

Media

Media

Integrations Supported

Cisco Identity Services Engine (ISE)
CycloneDX
Go
Java
JavaScript
NuGet
Python
Ruby

Integrations Supported

Cisco Identity Services Engine (ISE)
CycloneDX
Go
Java
JavaScript
NuGet
Python
Ruby

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

Sonatype

Date Founded

2008

Company Location

United States

Company Website

www.sonatype.com/products/auditor

Company Facts

Organization Name

Finite State

Date Founded

2017

Company Location

United States

Company Website

finitestate.io/products/finite-state-platform/

Categories and Features

Application Security

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Vulnerability Management

Asset Discovery
Asset Tagging
Network Scanning
Patch Management
Policy Management
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Popular Alternatives

Popular Alternatives

Tenable One Reviews & Ratings

Tenable One

Tenable
Revenera SCA Reviews & Ratings

Revenera SCA

Revenera
CodeSentry Reviews & Ratings

CodeSentry

CodeSecure