Acquisition extends software integrity platform

Recent trends highlight that OSS and other third party components commonly used to build software, introduce multiple layers of risk related to license obligations, security vulnerabilities, IP ownership, and quality attributes of the external code. Organisations seeking to mitigate these risks are turning to robust SCA solutions that can address these issues.

"As organisations continue to rely more and more on open source and third party components to build software, maintaining total visibility and managing risk throughout the software supply chain is critical," said Andreas Kuehlmann, senior vice president and general manager of Synopsys' Software Integrity Group. "Understanding software dependencies and their license obligations has been and will continue to be an important part of developing software. By combining Protecode technology with our current SCA solution that focuses on mitigating security vulnerabilities, Synopsys has a comprehensive offering that addresses the gamut of risk across the software supply chain."

Protecode's technology bolsters and extends Synopsys' existing SCA solution by adding improved OSS license detection via source code analysis, OSS governance and policy enforcement features, and Protecode's proprietary Global IP Signatures Database. These capabilities are highly complementary to Synopsys' SCA solution, which analyses binary code to identify third party components and flag known security vulnerabilities. By combining these technologies, Synopsys offers the most comprehensive SCA solution in the industry.