Phylum Insights and Resources

The Power of the Pod

I love podcasts. I started listening in 2005 with an Apple iPod I got the year before. To really date me, I used a 3.5mm auxiliary-to-cassette adapter plugged into my truck's tape deck

Charles Coggins Sep 30, 2023 5 min read

Phylum Blocks Software Supply Chain Security Attacks

Phylum identifies malicious or risky open-source packages before they enter the software supply chain.

SCA or public databases

82%

of Phylum’s findings are not found by
SCA or reported to public databases

Other curation tools

70%

of Phylum’s findings are not found by
other curation tools

Other software supply chain companies

60%

of Phylum’s findings are not found by
other software supply chain companies

Secure Supply Chain Consumption Framework (S2C2F) and Phylum

As threat actors increasingly execute more attacks via the open-source software ecosystem, clear gaps have emerged in modern application security. While organizations have adopted technologies...

Mikala Vidal Jun 23, 2023 10 min read

Phylum Adds Open Policy Agent (OPA) and Continuous Reporting

Customers now have more flexibility when creating and enforcing custom policies, and can show compliance with key software supply chain frameworks, regulations and guidelines. Phylum’...

Phylum Research Team Apr 18, 2023 1 min read

Software Development Is Changing Again…

Development is happening more quickly than ever before, and Department of Defense stakeholders want more automation in software development and acquisitions. Recent strategic initiatives from...

Phylum Research Team Mar 8, 2023 4 min read

If SBOMs are a must, let’s make them as effective as possible

Since the announcement of Executive Order 14028, curiosity and confusion around SBOM (Software Bill of Materials) mandates has been widespread. SBOMs are indeed a jumping...

Phylum Research Team Feb 24, 2023 12 min read

Phylum Insights and Resources

Phylum Blocks Software Supply Chain Security Attacks

Phylum identifies malicious or risky open-source packages before they enter the software supply chain.

Subscribe to our insights