Software Composition Analysis from Code to Cloud
Anchore Enterprise is an SBOM-powered Software Composition Analysis (SCA) solution that provides scanning and continuous monitoring of cloud native applications enabling automated security and compliance across the entire software lifecycle (Code to Cloud).
Price $5,000 | 12 month subscription available.
The Anchore Enterprise DoD policy packs contain checks for multiple compliance standards. Included standards are NIST 800-53, 800-161, 800-190, and 800-218. The checks for these standards encompass checking static content prior to deployment to speed the review of auditors once software has been deployed into production.
Price $5,000 | 12 month subscription available.
The FedRAMP policy pack can check a container image against known static FedRAMP controls to speed the authority to operate (ATO) process. The FedRAMP policy will verify container images are compliant with FedRAMP controls that can be verified prior to deployment. Verifying container images prior to deployment shortens audit cycles in FedRAMP environments.
Price $5,000 | 12 month subscription available.
The CISA Known Exploited Vulnerabilities Catalog (KEV) policy checks container images for the specific vulnerabilities identified by CISA. The KEV list consists of vulnerabilities that are known to be exploited by attackers and pose a significant risk. This policy will detect and flag software identified as containing one of these vulnerabilities.
showing 1 - 4