Security for Teams Using Open-Source Code. Designed for DevOps.

San Francisco, CA
Joined September 2012
Our CEO Mark @curphey shares his thoughts on why Diversity and inclusion is the new normal and could be the key to unlocking success in information security. sourceclear.com/blog/Diversi…
Product Release: SourceClear #Lightman scanner #Python 3 support is now available. To get it, simply update your CLI (apt-get update/brew update) or if using any of our integrations it will automatically download on the next scan. #AppSec #DevOps #DevSecOps
2
4
It's #Friday! Do you know what #opensource went out the door in your product this week? Often > 90% of builds are open-source libraries. That means you only scan 10% of your attack surface with #SAST alone. Get a free demo and scan your repos today! app.sourceclear.io/
Replying to @crashappsec
@curphey crushed it at #HITBGSEC with keynote on #SGL and finding vulnerabilities in open-source code at scale. sourceclear.com/sgl/
3
5
Replying to @asankhaya
@asankhaya demos #SGL - security graph language to uncover security issues in open-source code real time! #HITBGSEC sourceclear.com/sgl/
7
3
In Aug., SAP was hit with a directory traversal vulnerability in the Netweaver Java Container. What are the impacts? medium.com/sourceclear/divin…
1
2
What are the impacts of external XML entity (XXE) attacks in the #Android #IntelliJ plugin? We dive in. sourceclear.com/blog/Exposin…
2
1
WEBINAR: join @curphey live on Sept. 6th. Hear (& see a demo of) how to manage the risks of open-source software: sourceclear.com/webinar/vuln…
8
7
Directory traversal attacks get a bad rep, esp. in fintech. Here's how they can impact your open-source code. sourceclear.com/blog/Diving-…
2
4