Sold by: ReversingLabs
Deployed on AWS
Open source package security for developers: block malicious and tampered npm, PyPI, and other OSS packages in CI/CD before they reach a build.
Overview
ReversingLabs Spectra Assure Community+ brings automated open source package security to individual developers and small development teams. It checks the open source packages your projects depend on for malware, tampering, and suspicious behaviors, in addition to known vulnerabilities, and enforces those checks in CI/CD pipelines, JFrog Artifactory, and AI-assisted development workflows. Malicious packages are deliberate attacks rather than known vulnerabilities, so CVE-based scanners do not flag them.
Who It's For
- Individual developers who want automated checks on the open source packages their projects depend on
- Small development teams that want to gate CI/CD builds on open source package risk
- Teams using JFrog Artifactory that want to stop unsafe packages at the repository
- Developers using AI coding assistants who want to restrict the risky packages those tools pull in
Get Started
- Start a free trial or subscribe with your AWS account
- Complete registration on the ReversingLabs setup page to activate your Spectra Assure account
- Create an API token and add package checks to your CI/CD pipeline, JFrog Artifactory, or VS Code
- Review package risk verdicts and block packages that fail your policy
Pricing
- $9.99 per month or $99 per year for up to 1 million open source package lookups, billed on your AWS invoice
- No separate procurement process or new vendor setup
- For proprietary and commercial software coverage, larger teams, or custom terms, choose Request Private Offer on this page
How It's Delivered
- SaaS platform hosted by ReversingLabs; nothing is deployed into your AWS account
- Web portal and REST API with up to 10 API tokens
- Integrations for CI/CD pipelines, JFrog Artifactory, and a VS Code extension
Detect Malware and Tampering in Open Source Packages
- Malicious package detection: Flag known malicious open source packages identified by ReversingLabs threat research
- Suspicious behaviors: See the code behaviors a package exhibits so you can spot risky functionality before you install it
- Open-source context: Continuous analysis of more than 6 million packages across popular registries separates real threats from noise
- Ecosystem coverage: npm, PyPI, NuGet, RubyGems, VS Code Marketplace, and other open source package communities
Enforce Package Policy Automatically
- CI/CD enforcement: 1 million lookups per month so every build can check its dependencies
- JFrog Artifactory: Block unsafe open source packages from being imported into your artifact repository
- AI-assisted development: Restrict risky open source packages in AI coding assistants and agentic workflows
- VS Code extension: Check packages for supply chain risk while you code
When You Need More Coverage
- Community+ covers public open source packages. Spectra Assure Essentials and Enterprise add analysis of proprietary and commercial software, multi-user management with SSO, and unlimited lookups. Search keywords (169 characters) malicious packages, open source malware, npm security, PyPI security, dependency scanning, JFrog Artifactory, DevSecOps, developer security, AI coding assistant security Category Application Security (one category only, matching the Enterprise listing guidance) Pricing dimension Community+ monthly subscription - up to 1,000,000 open source package lookups per month: $500 per month Support information ReversingLabs support portal: https://support.reversinglabs.com/hc/en-us . Documentation: https://docs.secure.software/
Highlights
- Open Source Package Security in CI/CD: Check every dependency in your pipeline and JFrog Artifactory with 1 million package lookups per month, and block unsafe open source packages before they reach a build.
- Threats Beyond Vulnerabilities: Detect malware, tampering, and suspicious behaviors in open source packages that CVE-based scanners are not designed to catch, backed by continuous analysis of more than 6 million packages.
- Protect AI-Assisted Development: Restrict risky open source packages in AI coding assistants and agentic development workflows, and check packages in VS Code as you write code.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Spectra Assure Community+ | For individual developers to automate OSS supply chain protection. 1M / Month Lookups. | $9.99 |
Dimensions summary
This listing offers one pricing option: Spectra Assure Community+ for individual developers. You buy it as a contract covering a single user. The included quota lets you run up to 1 million package lookups per month, where a lookup checks an open-source package for supply chain risks. Pricing does not scale across tiers or instance sizes here. Instead, the fixed monthly lookup allowance defines your usage ceiling under the contract. This option targets developers who want to automate open-source security checks within their own development and CI/CD workflows.
Top-of-mind questions for buyers
A lookup checks a single open-source package for supply chain risks. The service continuously monitors changes across more than six million packages. Each package you query for malware, vulnerabilities, tampering, or other risk indicators draws from your monthly allowance of up to 1 million lookups.
The allowance is set per month at up to 1 million lookups. It defines your usage ceiling for each monthly period under the contract. The pricing table does not state whether unused lookups roll over. Contact the vendor to confirm reset and carryover rules for your contract.
It covers public open-source package ecosystems and automates risk checks within your development and CI/CD pipelines. You can restrict risky packages in AI-assisted coding workflows and use integrations for repositories and build processes. It does not scan proprietary or commercial software packages.
www.reversinglabs.com+1
Helpful?
Vendor refund policy
No refunds are available
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
ReversingLabs provides technical support 24/7/365 for Software Supply Chain Security products, including Spectra Assure.
Contact Support Existing customers requiring support with ReversingLabs products and services can reach the support team through either channel below.
- Phone: +1 617 250 7518, option 2
- Email: support@reversinglabs.com
Self-Service Resources
- Product documentation: https://docs.secure.software
- Learning Lab: https://www.reversinglabs.com/learning-with-reversinglabs
Product documentation includes integration guides, API references, and policy details to help you get started and troubleshoot common issues. The Learning Lab offers training materials to help your team build expertise with ReversingLabs products.
For questions about pricing, licensing, or private offers, contact sales@reversinglabs.com .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Spectra Assure detects malware, tampering, and exposed secrets in the software you build and buy. It analyzes the final software package, whether a binary, container, or AI model, with no source code required, so you can vet third-party and commercial software before deployment. Integrations with CI/CD, cloud, and ITSM tools automate testing and enforce policies across your software supply chain.
ReversingLabs Spectra Assure is a software supply chain security platform that scans thousands of file formats to identify embedded threats and secrets leakage. Spectra Assure integrates with CI/CD, cloud, and ITSM tools to automate testing, enforce politics, and establish security guardrails. Spectra Assure supports continuous, customized, extensive coverage for third-party software and open-source components.
Detect malware in millions of files a day without executing them. Deep static analysis, ML, and threat intelligence for SOC and file-heavy workflows.
SPECTRA is an integrated enterprise communication platform for contact center operations and internal business communications.
Manage all customer interactions and internal messaging from a single unified interface to enhance efficiency and satisfaction.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.