Software supply chain security vendors in the United States

Finite State provides a product security platform for connected devices, automating SBOM generation, vulnerability analysis, and compliance evidence.

Software supply chain security and artifact management platform that blocks risky open source packages, scans for exploitable vulnerabilities and governs releases and AI models.

NetRise analyses compiled software to create an inventory of components and identify supply chain risks.

ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software.

Generates SBOMs for embedded code and hardens vehicle ECU software against memory-based exploits at runtime.

Safeguard is a software supply chain security platform.

Sonatype provides tools to manage and secure open source components and AI models in software development.

Chainguard builds hardened, verified open source container images, libraries and packages to reduce vulnerabilities.

SBOM and vulnerability management platform that helps carmakers and suppliers track risk in vehicle software.

Elite security research firm specializing in source code review, blockchain auditing, and building industry-standard open-source security tools.

AISLE provides AI-native vulnerability management that finds, fixes, and verifies software vulnerabilities.

Black Duck provides application security testing tools for software development.

Checkmarx provides application security testing software that scans code for vulnerabilities.

Doppler provides a secrets management platform for developers, AI agents, and automated workflows.

Eclypsium provides continuous assurance of critical hardware, firmware, and software across enterprise infrastructure.

Endor Labs provides an agentic application security platform for AI-generated and open source code.

GitHub is a software development platform where developers, agents, and code come together.

Harness provides an AI-native software delivery platform for DevOps, testing, security, and cost optimization.

Legit Security provides application security for AI-generated code and software development.

Mend.io provides application security and AI security software for code and AI systems.

NowSecure provides mobile app security and AI governance.

Second Front Systems provides a DevSecOps suite that helps software providers and government agencies build, secure, and deploy software to government and regulated networks.

Veracode provides a platform that identifies and fixes security flaws in software.

Keyfactor provides software for managing machine identities and cryptographic keys.

Semgrep provides a platform for scanning code and dependencies to find security issues.

Snyk provides a security platform that finds and fixes vulnerabilities in code, dependencies, containers, and cloud infrastructure.