interviewed – Azi Cohen
summary
WhiteSource describes a live service that scans assembled code, prevents unsafe open source at the gate by surfacing vulnerability status and usage data directly in the developer’s browser, and aggregates community vulnerability data to notify teams when a CVE appears and when a patch is available. Claims: stops risky components before inclusion, reduces remediation cost; evidence: dashboard alerts tied to inventory; scale notes: Gartner 80% of new code uses OSS and company targets 3x annual growth with Microsoft as investor.
AI-written summary · about
chapters (4)
- 0:00Start
- 4:11Identifying New Vulnerabilities
- 4:47Secret Sauce
- 7:07What Do You See Happening in the Industry
related talks
09mThe intersection of InfoSec and DevOps
38mApplication Security in the age of Open Source
43mApplication Security is a Community Effort
49mOpen-source vulnerability management? Use the source, Luke!
51mKeynote: 20:20 The History and Future of OWASP
51mA Roadmap for Your OSS Security Lifecyle Journey to Protect Customers
16mKeynote: There Is Just One Way to Do Open Source Security: Together
40mSecure Your Code from Open Source Vulnerabilities