What is Phylum?

Phylum acts as a protective barrier for applications within the open-source ecosystem and the associated software development tools. Its automated analysis engine rigorously examines third-party code upon its entry into the open-source domain, aiming to evaluate software packages, detect potential risks, alert users, and thwart attacks. You can visualize Phylum as a type of firewall specifically designed for open-source code. It can be positioned in front of artifact repository managers, seamlessly integrate with package managers, or be utilized within CI/CD pipelines. Users of Phylum gain access to a robust automated analysis engine that provides proprietary insights rather than depending on manually maintained lists. Employing techniques such as SAST, heuristics, machine learning, and artificial intelligence, Phylum effectively identifies and reports zero-day vulnerabilities. This empowers users to be aware of risks much earlier in the development lifecycle, resulting in a stronger defense for the software supply chain. The Phylum policy library enables users to enable the blocking of critical vulnerabilities, including threats such as typosquats, obfuscated code, dependency confusion, copyleft licenses, and additional risks. Furthermore, the adaptability of Open Policy Agent (OPA) allows clients to create highly customizable and specific policies tailored to their individual requirements, enhancing their security posture even further. With Phylum, organizations can ensure comprehensive protection while navigating the complexities of open-source software development.

Pricing

Free Trial Offered?:
Yes

Integrations

Offers API?:
Yes, Phylum provides an API

Screenshots and Video

Phylum Screenshot 1

Company Facts

Company Name:
Phylum
Date Founded:
2020
Company Location:
United States
Company Website:
phylum.io
Edit This Page

Product Details

Deployment
SaaS
Windows
Mac
Linux
On-Prem
Training Options
Documentation Hub
Online Training
Video Library
Support
Web-Based Support

Product Details

Target Company Sizes
Individual
1-10
11-50
51-200
201-500
501-1000
1001-5000
5001-10000
10001+
Target Organization Types
Mid Size Business
Small Business
Enterprise
Freelance
Nonprofit
Government
Startup
Supported Languages
English

Phylum Categories and Features

DevOps Software

Approval Workflow
Dashboard
KPIs
Policy Management
Portfolio Management
Prioritization
Release Management
Timeline Management
Troubleshooting Reports

Application Security Software

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

More Phylum Categories