Our great sponsors
-
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
OP - rather than jumping in with a “solution”, I would be Irving you to use this as an opportunity for change in your company to improve the governance around software installation in your company (a software catalog and white listing applications would be the best approach), reduce the exposure of licensing costs (or pirated software) in your environment and simplify your ongoing support requirements. Software Bill Of Materials software such as Cyclone DX as a possible solution to collate the information along with vulnerability information, to focus on the known vulnerabilities vs oldest software would be my recommendation. This is a priority in the US under the Executive Order 14208 to improve the nations’s cyber security - The minimum requirements for a Software Bill Of Materials.
Related posts
- Looking for an alternative to gradle dependency tree
- OWASP CycloneDX – The Open Source SBOM Format
- CISA Director on Log4j Vulnerability
- Who in your organization is responsible for deciding and implementing AppSec tools? And any recommendations for a reliable alternative for Snyk tools? Thanks!
- SBOM management program?