Overview
Think of Phylum like a firewall for open-source code. Phylum can be deployed in front of artifact repository managers like Artifactory and Sonatype Nexus to block software supply chain attacks and know risks before open-source software packages enter your organization, or integrate directly with package managers to block threats from developer workstations. Phylum can also be deployed in CI/CD pipelines. Phylum users benefit from its powerful, automated analysis engine that reports proprietary findings instead of relying on manually curated lists. Phylum uses SAST, heuristics, machine learning and artificial intelligence to detect and report zero-day findings. Users know more risks, sooner and earlier in the development lifecycle for the strongest software supply chain defense.
The Phylum policy library allows users to toggle on the blocking of critical vulnerabilities, attacks like typosquats, obfuscated code and dependency confusion, copyleft licenses, and more. Additionally, the flexibility of OPA enables customers to develop incredibly flexible and granular policies that fit their unique needs, based on any attribute related to the open-source software.
Schedule a demo now: https://calendly.com/meet-with-phylum/phylum-demo
Highlights
- Vet open-source packages and block attacks before software supply chain threats ever have the chance to enter an organization.
- Easily select the criteria for the open-source software packages allowed to be used in source code. Use our policy library to choose your criteria based on specific indicators, attack types or regulatory guidelines, or create your own custom policy using Open Policy Agent (OPA).
- Look up historical packages at any time, even after they have been removed from the open-source ecosystem, for incident response, governance or policy adherence purposes.
Details
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
Phylum Community Edition | Free platform access, 5 project, 1 user | $0.00 |
Phylum Teams | SaaS deployment, Standard Support, 100 devs (volume discount for 100+) | $54,000.00 |
Phylum Enterprise | SaaS, Premium Support, 350 devs (volume discounts for 350+, VPC avail) | $147,000.00 |
Vendor refund policy
No refunds
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Phylum Care Standard Support - email support, quarterly reviews, technical and feature updates Premium Support - available upon request Phylum Care contacts and team members are allocated upon contract execution.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.