Checkmarx acquires open source supply chain security startup Dustico

guest · Aug 5, 2021

Checkmarx acquires open source supply chain security startup Dustico
August 5, 2021
https://techcrunch.com/2021/08/05/c...source-supply-chain-security-startup-dustico/

Checkmarx, an Israeli provider of static application security testing (AST), has acquired open-source supply chain security startup Dustico for an undisclosed sum.

Founded in 2020, Dustico provides a dynamic source-code analysis platform that employs machine learning to detect malicious attacks and backdoors in software supply chains.
Click to expand...

The acquisition will see Checkmarx combine its AST capabilities with Dustico’s behavioral analysis technology to give customers a consolidated view into the risk and reputation of open-source packages, and as a result, a more comprehensive approach to preventing supply chain attacks.

The deal comes amid a sharp rise in supply chain attacks, in which threat actors slip malicious code into a trusted piece of software or hardware. Last December, it was revealed that Russian hackers had breached software firm SolarWinds to plant malicious code in its IT management tool Orion.
Click to expand...

Dustico’s technology, which is similar to that offered by Sonatype, analyses open source packages using a three-pronged approach.
Click to expand...

Log in or Sign up

Checkmarx acquires open source supply chain security startup Dustico

guest Guest

Log in or Sign up

Checkmarx acquires open source supply chain security startup Dustico

guest Guest

Useful Searches