How Revenera‘s Code Insight Can Simplify the Process and Minimize Risks  In today’s tech-driven world, checking out software before buying or integrating it into your business is a must. This process, known as software due diligence, invo...

Integrating security into every phase of the software development process is no longer optional—it’s imperative. DevSecOps, the methodology that embeds security within development and operations, has emerged as a fundamental practice for o...

Ensure your code is secure and compliant by effortlessly managing open source dependencies directly in your IDE.

Join our expert team as they walk you through how to setup a comprehensive OSS Management program to address both software supply chain security and legal compliance, in this live webinar.

In today’s dynamic software development environment, open source components are indispensable. They speed up development, foster innovation, and reduce costs. However, alongside these benefits comes the critical challenge of managing securit...

Join this beginner’s guide to OSS, SCA, OSPOs, and SBOMs to get started on your open source journey. In this productive webinar session by Revenera’s open source expert, Alex Rybak.

In our webinar, 2024 Software Security and Compliance Predictions, featuring Russ Eling of OSS Consultants and Alex Rybak from Revenera we review the 2023 trends, discuss the importance of automation in security, the impact of AI on code generatio...

Introduction about AI Time by time, the realm of technology undergoes rapid growth, witnessing the emergence of ground-breaking innovations that significantly influence the trajectory of our future. Presently, Generative AI stands as a pivotal for...

Learn about the latest regulation changes in the US and EU. Particularly what’s changing in the world of Open Source and how to navigate their legal rights and responsibilities in this Revenera webinar.

It’s time to discuss the hottest trends for 2024 in software composition analysis and software supply chain security. Register and attend this must-watch webinar and get a jumpstart on what to prepare for in the year ahead.

Join industry experts to learn how you can use SBOMs to improve the security of your software supply. This webinar will break down the myths of SBOM adoption and outline the steps to create a mature strategy to meet the needs of your organization. 

Join our expert team as they walk you through four key open source software (OSS) management use cases that enable you to confidently identify security vulnerabilities in open-source and third-party components within your code in this Revenera webinar

Learn about or get a refresher on OSS, SCA, OSPOs, and SBOMs along with the latest industry updates. In this productive webinar session by Revenera’s open source expert, Alex Rybak.

Lynn Westfall, software supply chain expert and Alex Rybak, senior director of product management at Revenera, will break down the multitude of updates to the various cybersecurity regulations and help you cut through the red tape in this webinar

Manage a complete Software Bill of Materials in a SaaS environment and ingest data from a wide range of sources, unifying internal and external SBOMs across your organization.

cURL is a popular project, providing both the libcurl library (used for URL transfers) and the curl command-line tool (used for getting and sending data using URLs). cURL was initially released 27 years ago and has been used universally since th...

Today’s software packages usually include an extensive number of third-party components. Companies must actively watch and manage each one to preserve security, license compliance, and functionality. As Alex Rybak explained in a previous blog, t...

Open source software (OSS) is driving the automobile industry into the future. Automakers are looking to the advancement of integrated technology to power not just engines, but market share as well. Autonomous vehicles, sensor technology, speed mo...

In the world of software development, DevSecOps has become an essential approach to streamline the software delivery lifecycle while ensuring security. If you are serious about license compliance as well, it’s vital to include enough checks and ...

In simple terms we think of a Software Bill of Materials (SBOM) as an inventory of the software components found in software applications—open source, third-party, and custom code. It may be that not all developers, security personnel, and stake...

Impact to Open Source Use In March 2023, the U.S. Government released the National Cybersecurity Strategy. Recently, the White House followed up by releasing its implementation plan to support that strategy—the National Cybersecurity Strategy Im...

If the past few years in software security and license compliance showed us anything, it’s that threat actors will continue to find a way in. The discovery of vulnerabilities and ongoing exploits demonstrate how there is no end to security itera...

Are you getting up or hitting the snooze button? I have a vivid recollection of a moment back in 2009 when my CEO, co-founder, and I convened in our conference room in San Francisco. We engaged in a spirited discussion, pondering the most fitting term to describe the collection of items our pioneering SCA scan solution provided to our customers.

This analyst report from IDC presents the challenges companies face with SBOM adoption, operationalizing the SBOM, and advice for the technology buyer.

Industry leaders from GTC Law and Revenera are broght together discuss why legal’s role in risk mitigation has never been more critical in this Revenera webinar – register now.

Industry leaders from BlackBerry, StackAware, Interneuron and Flexera are broght together to discuss the software supply chain, cybersecurity and more in this Revenera webinar – register now

Industry leaders from Xerox, softScheck, Interneuron and Revenera are broght together to discuss what new technologies will impact legal risk, security, and software development in this Revenera webinar – register now

Industry leaders from BlackBerry, StackAware, Interneuron and Revenera are brought together to discuss the impact of ChatGPT, AI, machine learning, and other technologies on the open source community in this Revenera webinar – register now

When we talk about security related to the software supply chain and third-party software management, it’s key that the tools you use provide detailed reports on the known and unknown vulnerabilities inside applications along with the level of exploitability of those vulnerable components. Absent that, all you have is a listing of SBOM parts without much to act on. Typically, you don’t want to co-mingle security information with an SBOM because it’s too dynamic—it’s always changing.

Every once in a while, we need to brag a bit about our accomplishments.

Join Dr. Chris Wood CISSP with Lockheed Martin and Alex Rybak, Senior Director of Product Management at Revenera as they cut through the SBOM noise and provide a no-nonsense guide to SBOMs

Leading experts from Adobe, Bitsea, GTC & Revenera addresses the critical role legal plays in supporting a company’s management of open source and third-party components and more in this Revenera webinar

Leading experts from Adobe, Bitsea, GTC & Revenera discuss open source code audit trends, recent changes, and actions organizations should take now to secure their software supply chain in this Revenera webinar

What is GPL? The GNU General Public License, often known as copyleft or viral, grants permission to use or reuse or modify source code to make derivative works with a condition that if you distribute your program to others, it requires you to license the derivative work under the same license. There is a catch to this, i.e., by agreeing to the GPL license, (if you plan to redistribute) you must make the source code wholly available to users and allow further modifications and retribution of your product.  This makes it unpopular to authors who make money using proprietary software.…

Leading experts from Adobe, Bitsea, GTC & Revenera discuss how open source licenses are changing and what it means to you in this Revenera webinar

The past decade has been a whirlwind for the software supply chain. As the use of open source software (OSS) has become more pronounced, more businesses than ever before are using SBOM (Software Bill of Materials) solutions in order to better manage OSS and third-party components. An SBOM is a formal, queryable record containing the details and relationships of various components using in building software.

In a continuing effort to bolster and secure the nation’s software supply chain, the Biden administration issued the 2023 National Cybersecurity Strategy. This plan focus’ on enhancing the country’s defenses against emerging threats, such as ransomware and supply chain attacks. Listen to this podcast to better understand what's outlined in the report and what it may mean to you as a software provider. 

In a continuing effort to bolster and secure the nation’s software supply chain, yesterday the Biden administration issued the 2023 National Cybersecurity Strategy. This plan focus’ on enhancing the country’s defenses against emerging threats, such as ransomware and supply chain attacks. Background We highlighted the federal government’s focus on improving the U.S.’ digital defenses back in 2021 after high-profile cybersecurity events like the SolarWinds breach and the ransomware attack on the Colonial Pipeline.

Track all the components in your software, regardless of where in the supply chain they originated. Sign up here to speak with us about a 30 day free trial.

Get these four info-packed resources that will help you understand OSS compliance, SBOMs, and building your own Open Source Program Office.

Hear experts from the Linux Foundation, Fenwick, OSS Capital and more, discuss the importance of a software bill of materials and where organizations should spend their time and effort when it comes to SBOMs

Read this whitepaper to understand the motivations, strategies and best practices for success with an OSPO.

We talk a lot about SBOMs these days. The U.S. government’s Cybersecurity Executive Order along with other industry and U.K. mandates launched the discussion to the front of the line. And, while SBOMs do provide a consistent and clear insight into the software that you’re using, they’re far from the ultimate fix when managing software security. Once you’ve compiled a comprehensive SBOM, you need to then put that data to use by coupling it with other tools.

Open source software (OSS) is a wonderful resource that streamlines development and increases the reliability of your project. However, the price of using OSS is being able to manage it effectively. As your business is delivering software applications to market, it is your responsibility to ensure what you deliver does not come with security risks. Luckily, it’s never too late to prepare for better open source and third-party component management. Compliance is never perfect; there will always be more to do.

Join us and get real-world guidance in this information-rich webinar as a panel of experts talk about where enterprise organizations and software providers should start their SBOM management journey

Join us and discover what prompted OpenChain to create and release the Security Assurance Reference Guide and learn more about best practices and a thorough approach to open source and third-party component management.

On September 14th, The White House published a memorandum addressing the state of the global software supply chain.