Phylum

Phylum is an automated, software supply chain security platform that continuously informs organizations of risk, blocks zero-day attacks, and enforces compliance and governance without disrupting innovation. Phylum analyzes open-source software as it is published and ingests software packages, lockfiles, and SBOMs to contextualize risks, prevent threats, and inform developers and security teams. Customers use the Phylum platform to protect applications from malicious code, evaluate third-party vendors, identify brand misuse and targeted attacks, complete mergers and acquisitions, and limit risks associated with using AI to write or fix source code. Phylum also offers a threat feed of real-time software supply chain attacks that can be consumed by any security analytics or observability product to enrich other findings. In 2022, Phylum's analysis of open-source packages identified thousands of new malicious packages, malicious authors, and supply chain risks that culminated in a massive improvement to open-source software and the first inaugural Black Hat Innovation Spotlight award. Download the Phylum GitHub App: https://github.com/marketplace/phylum-io