Think of Phylum like a firewall for open-source code. Phylum can be deployed in front of artifact repository managers like Artifactory and Sonatype Nexus to block software supply chain attacks and know risks before open-source software packages enter your organization, or integrate directly with package managers to block threats from developer workstations. Phylum can also be deployed in CI/CD pipelines. Phylum users benefit from its powerful, automated analysis engine that reports proprietary findings instead of relying on manually curated lists. Phylum uses SAST, heuristics, machine learning and artificial intelligence to detect and report zero-day findings. Users know more risks, sooner and earlier in the development lifecycle for the strongest software supply chain defense.

The Phylum policy library allows users to toggle on the blocking of critical vulnerabilities, attacks like typosquats, obfuscated code and dependency confusion, copyleft licenses, and more. Additionally, the flexibility of OPA enables customers to develop incredibly flexible and granular policies that fit their unique needs, based on any attribute related to the open-source software.

Schedule a demo now: https://calendly.com/meet-with-phylum/phylum-demo