Sobre o WhiteSource Software

WhiteSource is the leading solution for agile open source security and license compliance management.
It integrates with your development environments and DevOps pipeline to detect open source libraries with security or compliance issues in real-time.

WhiteSource doesn’t only alert on issues, it also provides actionable, validated remediation paths to enable quick resolution and automated policy enforcement to speed up time-to-fix. It also helps you focus on what matters by prioritizing remediation based on whether your code is actually using a vulnerable method or not, and gu aranteeing zero false positives.

We've got you covered with support for over 200 programming languages, and continuous tracking of multiple open source vulnerabilities databases including the NVD, security advisories, peer-reviewed vulnerability knowledge bases, and open source projects issue trackers.

Principais benefícios do WhiteSource Software

- Find and fix open source vulnerabilities, in real time
- Prioritize vulnerabilities based on effectiveness
- Inventory management
- Open source license compliance
- Enforce policies automatically and create reports for all teams: security, DevOps, legal and management
- Supports due diligence, OEM or M&A

Dispositivos

Porte da empresa

P M G

Mercados

Estados Unidos, Canadá, Reino Unido, Austrália, China e outros 3, Índia, Japão, Alemanha

Idiomas

Alemão, Francês, Hebreu, Inglês

Recursos

Total de recursos do WhiteSource Software: 3

  • API
  • Gestão de conformidade
  • Priorizar

Alternativas

1Password Business

4,7
#1 alternativa ao WhiteSource Software
O 1Password atua como uma carteira digital segura para armazenar logins de sites, detalhes de cartões de crédito,...

Asset Panda

4,6
#2 alternativa ao WhiteSource Software
Asset Panda's cloud-based asset tracking & management platform supports work order management, purchase order...

EZOfficeInventory

4,6
#3 alternativa ao WhiteSource Software
Acompanhe e gerencie check-outs, locais e programações de manutenção de seus ativos com o software de gestão de ativos...

Google Cloud Platform

4,7
#4 alternativa ao WhiteSource Software
Google Cloud Platform is a modular-based platform providing multiple build and scale services to businesses of any size...

Avaliações

Classificação geral

4,2 /5
(5)
Relação qualidade/preço
1/5
Recursos
3/5
Praticidade
3,7/5
Suporte ao cliente
4,7/5

Já tem o WhiteSource Software?

Ajude os compradores de software! As avaliações de programas ajudam outras pessoas a tomarem melhores decisões.

Escreva uma avaliação!
Exibindo 5 avaliações de 5
Udi M.
Classificação geral
  • Fonte da avaliação

Classificação geral

  • Praticidade
  • Suporte ao cliente

FOSS lifecycle management with Whitesource

Avaliado em 10/11/2015

Using Whitesource to manage the process of analysing FOSS for a large product with hundreds of...

Using Whitesource to manage the process of analysing FOSS for a large product with hundreds of opensource dependencies.
Makes life much easier and helps you cover all dependencies much more accurately.

Some processes are still a bit course (though improved dramatically over the past 18 months)
Refresh performance might be a bit slow when there are very large dependency lists.

Best product out there for FOSS lifecycle management

Shaul S.
Classificação geral
  • Fonte da avaliação

Classificação geral

  • Praticidade
  • Suporte ao cliente

work with it for a long time still place to improve.

Avaliado em 10/11/2015

It aggregates my licenses in one centralized place. The software helps me to generate the reports...

It aggregates my licenses in one centralized place. The software helps me to generate the reports for many requests that I have inside my organization. It also helps me to identify the changes between versions and compare them.

Don T.
Classificação geral
  • Usado Outro durante 1 a 5 meses
  • Fonte da avaliação

Classificação geral

  • Relação qualidade/preço
  • Praticidade
  • Suporte ao cliente
  • Probabilidade de recomendação 1.0 /10

Tons of false positives, prepare to spend hours fixing it manually

Avaliado em 07/06/2018

After much manual configuration, a nicely formatted output that looks reputable. I could have just...

After much manual configuration, a nicely formatted output that looks reputable. I could have just made my own in excel a lot faster.

Vantagens

Fast, quick reviews of your code. They do a good job of putting all the relevant reports and dashboards in front of you quickly. Once you manually fix everything, it can look really good.

Desvantagens

The false positives are awful. I had to spend hours and hours manually fixing everything it mis-identified - dozens of libraries and thousands of source files. If you use a library not in its database... too bad. You can make a support request and wait for them to enter it for you, whenever they get around to it.
The search is pretty awful. There is some kind of syntax to using it but when I asked our account rep, she couldn't give me any documentation on it. You will frequently see results like "openssl-v0_9_8" in your search, but if you type "openssl" it will vanish and not come up. Don't ever both trying to search for a version, it doesn't work. This results in a lot of time scrolling through very large lists. Naming schemes are random and follow no established pattern.
For a good half of all libraries, they have not assigned a license. Guess who gets to go google search them all? You, the user! Isn't the point of this tool to help me identify the licensing?
UI navigation is challenging. Back button will take you to a different place than you were almost every time. You'll love the dashboard... because you have to go back to it roughly every 5 minutes and start over.
No great system for notes/todos/reminders. When you have to fix 60 libraries, it's hard to remember what you want to do with each one.

John mcintire
Classificação geral
  • Fonte da avaliação

Classificação geral

Easy to use. Saves tons of time.

Avaliado em 28/05/2013

We used to document it all manually. Now its done easily and effectively. Not to mention that we...

We used to document it all manually. Now its done easily and effectively. Not to mention that we missed many things, so with this we were able to fix some small issues before they become big issues....

Vantagens

easy
inexpensive
very comprehensive
no more hassle

Alice akins
Classificação geral
  • Fonte da avaliação

Classificação geral

License Management in the cloud

Avaliado em 17/09/2012

I use the free cloud based service of White Source and it is pretty well done. Things get done...

I use the free cloud based service of White Source and it is pretty well done. Things get done quickly and easy and the software helps me to track open source licences. There is nothing to complain about it!

Exibindo 5 avaliações de 5 Leia todas as avaliações

Perguntas frequentes sobre o WhiteSource Software

Abaixo estão algumas perguntas frequentes sobre o WhiteSource Software.

O WhiteSource Software oferece os seguintes planos de pagamento:

  • Modelo de preços: Assinatura
  • Teste Grátis: Disponível

Starting at $4,000 a year, based on contributing developers, get our pricing here: https://whitesourcesoftware.com/pricing

O WhiteSource Software oferece os seguintes recursos:

  • Automated Policies- Premium Feature
  • Automatic License Information Retrieval
  • Conditional Approval- Premium Feature
  • Free, Cloud-Based Service
  • Instant Audits
  • New Version Alerts- Premium Feature
  • Open Source Inventory Management
  • Organizational Licenses Report- Premium Feature
  • Privacy
  • Request and Approval Workflows
  • Risk Analysis
  • Risk and Task Management Dashboard

Os clientes habituais do WhiteSource Software são:

Pequenas empresas, Grandes empresas, Empresas de médio porte

O WhiteSource Software está nos seguintes idiomas:

Alemão, Francês, Hebreu, Inglês

Não temos informações sobre os dispositivos compatíveis com o WhiteSource Software.

O WhiteSource Software se integra com os seguintes aplicativos:

Bitbucket, CircleCI, CloudBees Core, Docker Cloud, GitHub, GitLab, Jira, Microsoft Azure, ThreadFix, Travis CI

O WhiteSource Software oferece as seguintes opções de suporte:

FAQs, Base de conhecimento, Suporte por telefone, Tutoriais em vídeo

Categorias relacionadas

Veja todas as categorias de software encontradas para WhiteSource Software.