WhiteSource Bolt redefines developer-focused application security tools with a free offering of integrated security alerts for open source vulnerabilities
WhiteSource, the leader in continuous open source security and license compliance management, announced today that WhiteSource Bolt, its leading open source security developer tool, is now available for free for all GitHub and Microsoft Azure DevOps users, helping developers work more securely with open source components in their native development environments.
First released in March of 2017 as a paid Microsoft Visual Studio extension, WhiteSource Bolt was designed to fit into a developer's natural ecosystem, allowing software development teams to close the gap that currently exists between code development and security teams. Additionally, WhiteSource Bolt increases developers' ability to work more efficiently with open source components by alerting in real-time once a vulnerable component is added or a new vulnerability is released for an existing component.
"WhiteSource Bolt enables GitHub developers to build more secure products," said Kyle Daigle, Director of Ecosystem Engineering at GitHub. "By detecting vulnerable open source components as soon as they are added to a GitHub repository and providing remediation recommendations, Bolt simplifies the process of vulnerability management for developers."
WhiteSource Bolt supports over 200 programming languages and is powered by WhiteSource's comprehensive vulnerabilities database, which is continuously updated with intelligence sourced from the NVD, security advisories, and popular open source issue trackers. The tool is the only developer tool capable of providing coverage for both binaries and source libraries, and offers real-time security alerts for reported vulnerabilities with suggested remediation paths to help keep organizations a step ahead of the hackers.
Versions for additional environments are planned for release in 2019.
"We are excited to strengthen and expand our offering for developers," said WhiteSource CEO Rami Sass. "WhiteSource Bolt was designed to make developers' lives simpler and we hope that offering it free of charge to all developers will help companies harness the power of open source."