News
Flexera Reimagines Open Source Vulnerability Detection with FlexNet Code Insight
December 2017 by Marc Jacob
Flexera announced that its world-renowned Flexera Software Vulnerability Database is now integrated into FlexNet Code Insight – the market-leading open source license and vulnerability detection platform. The integration gives software developers unparalleled insight into vulnerabilities that may lurk within their open source code, and the ability to remediate those vulnerabilities before shipping their products to customers.
Better Vulnerability Data Helps Close the Risk Window
The use of open source components in software development is skyrocketing. A decade ago, developers were using less than 100 open source libraries per release. Today, some industries are using more than 3,000. As open source dependency increases, software suppliers need to help ensure a safer software supply chain by truly understanding the vulnerability risk and compliance requirements they’re inheriting from the open source code they use.
As many companies have discovered the hard way, there’s an unacceptable risk window that persists between the discovery of a software vulnerability and when the patch is successfully installed. According to Flexera’s Vulnerability Review 2017, 17,147 vulnerabilities were recorded in 2,136 products from 246 vendors. 81 percent of those vulnerabilities had patches available on the same day as disclosure. But, on average, it takes companies 186 days to completely install those patches[1]. This risk window gives hackers plenty of opportunity to exploit vulnerabilities, and perpetrate attacks with costly consequences to businesses.
Flexera Software Vulnerability Database powers its market-leading Software Vulnerability Management solutions. By integrating this powerful database with FlexNet Code Insight, Flexera gives developers unparalleled ability to protect themselves and their customers from the potentially devastating effects arising when open source vulnerabilities are exploited.
With today’s announcement, FlexNet Code Insight is narrowing the risk window – providing comprehensive intelligence on discovered vulnerabilities. Organisations can now protect their products – and their customers – faster by identifying vulnerabilities as soon as they’re made public. Armed with better information, sooner, they’re then in a much better position to assess, prioritise and patch vulnerabilities before they’re exploited. Additionally, FlexNet Code Insight is able to alert development and security teams when new vulnerabilities are discovered in already shipping software.
